Uploaded image for project: 'Hue (READ ONLY)'
  1. Hue (READ ONLY)
  2. HUE-7997

Python LDAP library exposes password

          Details

          • Type: Bug
          • Status: Resolved
          • Priority: Major
          • Resolution: Fixed
          • Affects Version/s: 4.0.0, 4.1.0
          • Fix Version/s: None
          • Component/s: core.api
          • Labels:
            None

            Description

            When choosing Test LDAP Connection for Hue's Actions in Cloudera Manager, the LDAP password is exposed in plain text in stdout:

            *** ldap://w2k8-1.ad.xxx.cloudera.com:3268 - SimpleLDAPObject.simple_bind (['ccoxxxer@AD.SEC.CLOUDERA.COM', 'RAWPASSWORD', None, None],{})

            I replaced my password with 'RAWPASSWORD' above.
            We need to redact or obfuscate that.

              Attachments

                Activity

                  People

                  • Assignee:
                    ranade Prakash
                    Reporter:
                    ranade Prakash
                  • Votes:
                    0 Vote for this issue
                    Watchers:
                    1 Start watching this issue

                    Dates

                    • Created:
                      Updated:
                      Resolved: