Do not log plain text password when binding

Log DN instead
lpmoon · Oct 13, 2015 · 5ea722c · 5ea722c
1 parent 591f8c5
commit 5ea722c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/auth_server/authn/ldap_auth.go b/auth_server/authn/ldap_auth.go
@@ -93,7 +93,7 @@ func (la *LDAPAuth) bindReadOnlyUser(l *ldap.Conn) error {
 			return err
 		}
 		password_str := strings.TrimSpace(string(password))
-		glog.V(2).Infof("Bind read-only user %s", password_str)
+		glog.V(2).Infof("Bind read-only user (DN = %s)", la.config.BindDN)
 		err = l.Bind(la.config.BindDN, password_str)
 		if err != nil {
 			return err