| Description | If an error occurs while trying to perform a LDAP backup, the complete credentials for the bind are logged to bconsole / webui.
Example leakage log:
2020-10-16 17:23:53 backup.xx.yy-fd JobId 42531: Fatal error: Plugin Directory not defined. Cannot use plugin: "python:module_path=/usr/lib64/bareos/plugins:module_name=bareos-fd-ldap:uri=ldaps\://ldap.example.com:basedn=dc=example,dc=com:bind_dn=cn=admin,dc=example,dc=com:password=AdminExamplePassWordYouShouldNotSee!"
Maybe read the credentials / binding setup from a separate config file, so it is not logged anymore.
|
|---|
