BIND 10 #760: Conversion of cmdctl to use the new logging interface
BIND 10 Development
do-not-reply at isc.org
Wed Jun 29 12:37:19 UTC 2011
#760: Conversion of cmdctl to use the new logging interface
-------------------------------------+-------------------------------------
Reporter: | Owner: UnAssigned
stephen | Status: reviewing
Type: | Milestone:
enhancement | Sprint-20110712
Priority: major | Resolution:
Component: | Sensitive: 0
logging | Sub-Project: DNS
Keywords: | Estimated Difficulty: 2.0
Defect Severity: N/A | Total Hours: 0
Feature Depending on Ticket: |
Add Hours to Ticket: 0 |
Internal?: 0 |
-------------------------------------+-------------------------------------
Changes (by jelte):
* owner: jelte => UnAssigned
* status: assigned => reviewing
Comment:
Done, I also did one minor other change; on a failed login attempt, it
used to send back either 'username does not exist' or 'password is wrong',
which imo is a (minor) security flaw, since it leaks information. Both
errors are now reported to the user as 'username or password error'. Which
of the two it is is logged.
Pending #1074, the one (current) debug log level is hardcoded as a
constant.
--
Ticket URL: <http://bind10.isc.org/ticket/760#comment:4>
BIND 10 Development <http://bind10.isc.org>
BIND 10 Development
More information about the bind10-tickets
mailing list