UNCLASSIFIED
Thanks Alan, but this assumes local expertise with Perl and hook code so may 
not suit all levels of expertise.

I think a more generalise approach along the lines that Hugh was suggesting was 
a better and more generic approach (for the less skilled masses!), so to extend 
that further, it would be good to have something like a set of options for 
debug mode or extended debug mode (and to encompass some of the other 
suggestions on this trail) like:


-          Hide passwords

-          Hide (or mask) IP addresses

-          Possibly other options

I would be far more comfortable turning on and off debug options in a running 
Prod server rather than slotting in Perl hook code.

-Keith

From: Alan Buxey [mailto:a.l.m.bu...@lboro.ac.uk]
Sent: Tuesday, 14 October 2014 10:15 AM
To: Keith Morrell; Vangelis Kyriakakis; Radiator
Subject: RE: [RADIATOR] Hiding the LDAP Password attribute on Trace level 4 
[SEC=UNCLASSIFIED]

What info is it that you need to log/see as you can run a Perl hook that means 
you only log what you want, can run the system in non debug proper thread mode 
etc and not get passwords logged ;)

alan
_______________________________________________
radiator mailing list
radiator@open.com.au
http://www.open.com.au/mailman/listinfo/radiator

Reply via email to