Hi, all
I am testing ejabberd lately, one of the thing I don't understand is that ejabberd log the user password in plain-text, I am using ldap over tls for authentication and pidgin as the client, is there anything I did wrong?
Thanks
Sinux
Looking for ejabberd docs?
To access the most up-to-date ejabberd documentation, please visit docs.ejabberd.im »
ejabberd not encrypted in the debug log
Submitted by sinux on Thu, 2015-03-12 08:27
What is your log level ? You
What is your log level ? You should run production in error mode. Do you still see that info in that log level ?
For the record, we are going
For the record, we are going to add an option to hide password in log file, no matter what is the log level.
See this ticket on Github:
it's debug log level, when I
it's debug log level, when I downgrade the log level to info, it's gone. Anyway, I am glad that it will be handled carefully in the future release.
Thanks