4.2 upgrade issues

[Max Spicer]

On the subject of logging of properties on startup, it's also worth noting
that this could potentially log the values of secrets. The logging code
does hide values if the property names match a hard-coded (and not
documented?) pattern, but people with custom properties could fall foul of
this.

Max

On Wed, 4 May 2022, 17:43 Duncan Brannen via users, <users at shibboleth.net>
wrote:

> That's exactly it ( and ldap.properties ) the logging what was doing in
> the 4.2 installer was much appreciated.
>
> Get Outlook for iOS <https://aka.ms/o0ukef>
> ------------------------------
> *From:* users <users-bounces at shibboleth.net> on behalf of Cantor, Scott
> via users <users at shibboleth.net>
> *Sent:* Wednesday, May 4, 2022 5:09 pm
> *To:* Shib Users <users at shibboleth.net>
> *Cc:* Cantor, Scott <cantor.2 at osu.edu>
> *Subject:* Re: 4.2 upgrade issues
>
> Actually, I would guess the difference is that if your "backup" was also
> named idp.properties, the old code had a bug that was excluding it. It
> wasn't meant to, since a/idp.properties is definitely not assumed to be the
> same as b/idp.properties.
>
> So it was probably excluding it by accident of name, not because it was in
> a subdirectory.
>
> I'll add something about it to the ReleaseNotes but definitely not
> anything that's unintentional.
>
> -- Scott
>
>
> --
> For Consortium Member technical support, see
> https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fshibboleth.atlassian.net%2Fwiki%2Fx%2FZYEpPw&data=05%7C01%7Cdbb%40st-andrews.ac.uk%7Cf91a241f0e1c4a3fe82408da2de86c59%7Cf85626cb0da849d3aa5864ef678ef01a%7C0%7C0%7C637872773520276811%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=VY8MMuxh5fKB3Hm8G3uQD0EgdCzPdq8gXGDF9lxMiqY%3D&reserved=0
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
> --
> For Consortium Member technical support, see
> https://shibboleth.atlassian.net/wiki/x/ZYEpPw
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20220504/9b486c2d/attachment.htm>