[MXS-2843] remove password info from maxscale log Created: 2020-01-20  Updated: 2020-08-25  Resolved: 2020-01-21

Status: Closed
Project: MariaDB MaxScale
Component/s: Authenticator
Affects Version/s: None
Fix Version/s: 2.3.17, 2.4.6, 2.5.0

Type: Bug Priority: Major
Reporter: Muhammad Irfan Assignee: markus makela
Resolution: Fixed Votes: 0
Labels: None


 Description   

When adding "log_info = 1" to maxscale.cnf, a lot of "Added user:" lines appear in the log file, that contain each user created, including its password hash.

info   : Added user: INSERT OR REPLACE INTO mysqlauth_users VALUES ('user', 'host', NULL, 0, 'password-hash')
 
info   : Added user: INSERT OR REPLACE INTO mysqlauth_users VALUES ('user', 'host', NULL, 0, 'password-hash')

This is to request for passwords must not be stored in the logs at "Info" level.
Generated at Thu Feb 08 04:17:05 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.