[CLOUDSTACK-8342] LDAP Password is unsecure in the Global Settings Page

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 4.2.0, 4.4.0, 4.5.0
• Component/s: Management Server
• Security Level: Public (Anyone can view this level - this is the default.)
• Assignee: Unassigned
• Reporter: Matt Mullins
• Created: 25/Mar/15 02:59
• Updated: 25/Mar/15 02:59

Description

The setting for ldap.bind.password is showing as plain text in the global settings page. This password should be stared out (e.g. ************) to keep the password encrypted since these passwords are usually secure and kept private.

This should also stayed starred out when the edit is clicked on. The Admin can replace if necessary.