Hi all,

When I enabled logging of stack traces, the user passwords are being written
in cleartext in the log files!
I enabled stack tracing by adding the the following line in
RT_SiteConfig.pm:

Set($LogStackTraces, 4);

Can somebody please fix this serious error so that passwords are encrypted?
I am using RT 3.8.1 installed
from ports on a FreeBSD machine.  (Actually I think I got a patch from
someone in this mailing list.)  If
the error has been fixed in 3.8.2, please let me know.

Also, if a 3.8.2 port is available, is it stable enough to update my 3.8.1
version?

Thanks,
Akash.
_______________________________________________
http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users

Community help: http://wiki.bestpractical.com
Commercial support: sa...@bestpractical.com


Discover RT's hidden secrets with RT Essentials from O'Reilly Media. 
Buy a copy at http://rtbook.bestpractical.com

Reply via email to