james-server-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Thomas UNG (JIRA)" <j...@apache.org>
Subject [jira] [Created] (PROTOCOLS-26) Make AUTH method failed string a more useful error message
Date Sun, 17 Jul 2011 10:27:00 GMT
Make AUTH method failed string a more useful error message
----------------------------------------------------------

                 Key: PROTOCOLS-26
                 URL: https://issues.apache.org/jira/browse/PROTOCOLS-26
             Project: JAMES Protocols
          Issue Type: Improvement
          Components: smtp
    Affects Versions: 1.5
            Reporter: Thomas UNG
            Assignee: Norman Maurer
            Priority: Minor
             Fix For: 1.5


Have security sensitive information in log when auth login has failed

- // TODO: Make this string a more useful error message
- session.getLogger().error("AUTH method "+authType+" failed");
+ session.getLogger().error("AUTH method "+authType+" failed from " + user + "@" + session.getRemoteIPAddress());


--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org


Mime
View raw message