BIND 10 #760: Conversion of cmdctl to use the new logging interface

BIND 10 Development do-not-reply at isc.org
Wed Jun 29 12:37:19 UTC 2011


#760: Conversion of cmdctl to use the new logging interface
-------------------------------------+-------------------------------------
                   Reporter:         |                 Owner:  UnAssigned
  stephen                            |                Status:  reviewing
                       Type:         |             Milestone:
  enhancement                        |  Sprint-20110712
                   Priority:  major  |            Resolution:
                  Component:         |             Sensitive:  0
  logging                            |           Sub-Project:  DNS
                   Keywords:         |  Estimated Difficulty:  2.0
            Defect Severity:  N/A    |           Total Hours:  0
Feature Depending on Ticket:         |
        Add Hours to Ticket:  0      |
                  Internal?:  0      |
-------------------------------------+-------------------------------------
Changes (by jelte):

 * owner:  jelte => UnAssigned
 * status:  assigned => reviewing


Comment:

 Done, I also did one minor other change; on a failed login attempt, it
 used to send back either 'username does not exist' or 'password is wrong',
 which imo is a (minor) security flaw, since it leaks information. Both
 errors are now reported to the user as 'username or password error'. Which
 of the two it is is logged.

 Pending #1074, the one (current) debug log level is hardcoded as a
 constant.

-- 
Ticket URL: <http://bind10.isc.org/ticket/760#comment:4>
BIND 10 Development <http://bind10.isc.org>
BIND 10 Development


More information about the bind10-tickets mailing list