Details
-
Bug
-
Status: Closed
-
Major
-
Resolution: Won't Fix
-
None
-
None
-
None
Description
During testing, I see in the log that the password use in BASIC Auth was hidden by *****.
But when i try a replication who tell a ERRConn. The stack trace of error contain the password in plain-text.
And store in log file.
I doubt it's a debug feature.
I paste my couch log here: I hidden private info my self with AAAAA
Tue, 11 Dec 2012 13:46:14 GMT] [info] [<0.379.0>] Retrying HEAD request to
> https://lucas-AAAAA-1:*****@backup-1.AAAAAA.cc/lucas-AAAAA-1/ in
> 16.0 seconds due to error {conn_failed,{error,eoptions}}
> [Tue, 11 Dec 2012 13:46:28 GMT] [info] [<0.133.0>] 10.0.0.23 - - POST
> /_replicate 500
> [Tue, 11 Dec 2012 13:46:28 GMT] [error] [<0.389.0>] ** Generic server
> <0.389.0> terminating
> ** Last message in was
> ** When Server state == {state,"https://lucas-AAAA-1:--HERE MY PASS IN PLAINTEXT@
> backup-1.AAAAA.cc/lucas-AAAAA-1/",
> 20,[],[],
> {[],[]}}
> ** Reason for termination ==
> ** killed
>
> [Tue, 11 Dec 2012 13:46:28 GMT] [error] [<0.389.0>] {error_report,<0.31.0>,
> {<0.389.0>,crash_report,
> [[{initial_call,
> {couch_httpc_pool,init,['Argument__1']}},
>
,
>
,
> {error_info,
> {exit,killed,
> [
,
>
]}},
>
,
>
,
>
,
>
,
>
,
>
,
>
,
>
,
>
],
> []]}}
>
Contact me on my account email for more information or here.
Best regards
Lucas
Attachments
Issue Links
- duplicates
-
COUCHDB-1606 Replicator leaves plaintext password in logs
- Closed