yahoo-eng-team team mailing list archive
-
yahoo-eng-team team
-
Mailing list archive
-
Message #14727
[Bug 1320098] Re: neutronclient debug logging includes keystone auth token
** Project changed: neutron => python-neutronclient
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1320098
Title:
neutronclient debug logging includes keystone auth token
Status in Python client library for Neutron:
In Progress
Bug description:
neutronclient is logging the auth token in the nova logs. Since the
logs are world-readable, this means anyone user on this system can see
the auth token, which they can then use to get OpenStack administrator
access.
To manage notifications about this bug go to:
https://bugs.launchpad.net/python-neutronclient/+bug/1320098/+subscriptions