Re: [GeoNetwork-devel] username and password displayed in log file

[Greg B. <Gre...@or...>]

I'd also like to know if it's possible to use some kind of hashing of
the database username and password in the config.xml file. Also,
usernames and passwords for GN are stored as clear text in the database.

Clearly GN still has some security risks to be resolved and I'm sure
these will be tackled in time, but it would be worth adding them to an
issues log.

Sorry I'm no help...=20
=20
Greg Byrom
=20

________________________________

From: geo...@li...
[mailto:geo...@li...] On Behalf Of
Greg Coleman
Sent: 16 February 2007 03:33
To: geo...@li...
Subject: [GeoNetwork-devel] username and password displayed in log file



Hello List,

            I am running geonetwork inside tomcat. When a user logs in,
the username and password is displayed in the log. How can I prevent
this?

=20

Regards

=20

Greg Coleman.

------------------------------------------------------------------------
 The information contained in this communication is  for the use of the=20
 individual  or  entity  to  whom  it  is  addressed, and  may  contain=20
 information which is the  subject of legal privilege and/or copyright.=20
 If you have received this  communication in  error, please  notify the=20
 sender by return E-Mail and delete the transmission, together with any=20
 attachments, from your system. Thank you.
------------------------------------------------------------------------
-

=2E


This email is only intended for the person to whom it is addressed and ma=
y contain confidential information. If you have received this email in er=
ror, please notify the sender and delete this email which must not be cop=
ied, distributed or disclosed to any other person.

Unless stated otherwise, the contents of this email are personal to the w=
riter and do not represent the official view of Ordnance Survey. Nor can =
any contract be formed on Ordnance Survey's behalf via email. We reserve =
the right to monitor emails and attachments without prior notice.

Thank you for your cooperation.

Ordnance Survey
Romsey Road
Southampton SO16 4GU
Tel: 08456 050505
http://www.ordnancesurvey.co.uk
=0D