Skip to content

DB connection password in the clear #110

Open
@MU-BG

Description

@MU-BG

Hi,

While troubleshooting a server issue I noticed that the linux syslog (/var/log/messages) periodically shows the full connection details for our DB connections.

I tried reducing the logging level but even when "off" the DB connections are still showing.

Is there a method of disabling this?
Extract from log with details removed:

Jan 13 14:54:09 app-t-nodered01 Node-RED[801421]: {
Jan 13 14:54:09 app-t-nodered01 Node-RED[801421]: user: '',
Jan 13 14:54:09 app-t-nodered01 Node-RED[801421]: password: '<password_in_clear>',
Jan 13 14:54:09 app-t-nodered01 Node-RED[801421]: domain: '',
Jan 13 14:54:09 app-t-nodered01 Node-RED[801421]: server: '<DB_server_name>',
Jan 13 14:54:09 app-t-nodered01 Node-RED[801421]: database: '',
Jan 13 14:54:09 app-t-nodered01 Node-RED[801421]: options: { encrypt: false, useUTC: undefined }
Jan 13 14:54:09 app-t-nodered01 Node-RED[801421]: }

Thanks in advance

Metadata

Metadata

Assignees

No one assigned

    Labels

    needs more infoNeed more information to resolve this issue

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions