4.2 upgrade issues

Cantor, Scott cantor.2 at osu.edu
Wed May 4 17:05:51 UTC 2022


On 5/4/22, 12:59 PM, "users on behalf of Max Spicer via users" <users-bounces at shibboleth.net on behalf of users at shibboleth.net> wrote:

>    On the subject of logging of properties on startup, it's also worth noting that this could potentially log the
> values of secrets. The logging code does hide values if the property names match a hard-coded (and not
> documented?) pattern, but people with custom properties could fall foul of this.

Only on DEBUG, or maybe it's even TRACE. The warnings about dups don't log the values (I don't think?), only the names. But if you mean the installer logging on DEBUG will log this, you may be right. We don't generally expect that's too common.

-- Scott




More information about the users mailing list