{"action":"created","issue":{"url":"https://api.github.com/repos/chef/chef-server/issues/156","labels_url":"https://api.github.com/repos/chef/chef-server/issues/156/labels{/name}","comments_url":"https://api.github.com/repos/chef/chef-server/issues/156/comments","events_url":"https://api.github.com/repos/chef/chef-server/issues/156/events","html_url":"https://github.com/chef/chef-server/issues/156","id":71938242,"number":156,"title":"Erchef dumps LDAP password","user":{"login":"Roviluca","id":7407203,"avatar_url":"https://avatars.githubusercontent.com/u/7407203?v=3","gravatar_id":"","url":"https://api.github.com/users/Roviluca","html_url":"https://github.com/Roviluca","followers_url":"https://api.github.com/users/Roviluca/followers","following_url":"https://api.github.com/users/Roviluca/following{/other_user}","gists_url":"https://api.github.com/users/Roviluca/gists{/gist_id}","starred_url":"https://api.github.com/users/Roviluca/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Roviluca/subscriptions","organizations_url":"https://api.github.com/users/Roviluca/orgs","repos_url":"https://api.github.com/users/Roviluca/repos","events_url":"https://api.github.com/users/Roviluca/events{/privacy}","received_events_url":"https://api.github.com/users/Roviluca/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2015-04-29T17:33:13Z","updated_at":"2015-07-20T21:02:53Z","closed_at":null,"body":"Hello,\r\n\r\ni have upgrade our standalone  chef server 12.0.2 to 12.0.8 along with opscode-manage in order to fix bug #66 . After the upgrade, we will still getting the 500 error for the existing users, while troubleshooting the problem we found out that the password was dumped into the logs.\r\nBelow i pasted the logs (i removed the passwords).\r\n\r\n```bash\r\n==> /var/log/opscode/opscode-erchef/crash.log <==\r\n2015-04-29 16:23:38 =ERROR REPORT====\r\n{<<\"method=POST; path=/authenticate_user; status=500; \">>,{error,{error,badarg,[{erlang,iolist_to_binary,[[null,\"--\",<<\"PASSWORD_REMOVED_BY_ME\">>,\"--\"]],[]},{crypto,hash,2,[{file,\"crypto.erl\"},{line,228}]},{chef_password,sha1,3,[{file,\"src/chef_password.erl\"},{line,104}]},{chef_password,verify,2,[{file,\"src/chef_password.erl\"},{line,92}]},{oc_chef_wm_authenticate_user,verify_user,5,[{file,\"src/oc_chef_wm_authenticate_user.erl\"},{line,99}]},{oc_chef_wm_authenticate_user,process_post,2,[{file,\"src/oc_chef_wm_authenticate_user.erl\"},{line,87}]},{webmachine_resource,resource_call,3,[{file,\"src/webmachine_resource.erl\"},{line,186}]},{webmachine_resource,do,3,[{file,\"src/webmachine_resource.erl\"},{line,142}]}]}}}\r\n\r\n==> /var/log/opscode/opscode-erchef/erchef.log <==\r\n2015-04-29 16:23:38.754 [error] {<<\"method=POST; path=/authenticate_user; status=500; \">>,{error,{error,badarg,[{erlang,iolist_to_binary,[[null,\"--\",<<\"PASSWORD_REMOVED_BY_ME\">>,\"--\"]],[]},{crypto,hash,2,[{file,\"crypto.erl\"},{line,228}]},{chef_password,sha1,3,[{file,\"src/chef_password.erl\"},{line,104}]},{chef_password,verify,2,[{file,\"src/chef_password.erl\"},{line,92}]},{oc_chef_wm_authenticate_user,verify_user,5,[{file,\"src/oc_chef_wm_authenticate_user.erl\"},{line,99}]},{oc_chef_wm_authenticate_user,process_post,2,[{file,\"src/oc_chef_wm_authenticate_user.erl\"},{line,87}]},{webmachine_resource,resource_call,3,[{file,\"src/webmachine_resource.erl\"},{line,186}]},{webmachine_resource,do,3,[{file,\"src/webmachine_resource.erl\"},{line,142}]}]}}}\r\n\r\n==> /var/log/opscode/nginx/access.log <==\r\n127.0.0.1 - - [29/Apr/2015:16:23:38 +0200]  \"POST /authenticate_user HTTP/1.1\" 500 \"0.025\" 36 \"-\" \"Chef Manage/11.16.2 (ruby-2.1.5-p273; ohai-7.4.0; x86_64-linux; +http://opscode.com)\" \"127.0.0.1:8000\" \"500\" \"0.020\" \"11.16.2\" \"algorithm=sha1;version=1.0;\" \"pivotal\" \"2015-04-29T14:23:38Z\" \"REMOVED_BY_ME\" 1130\r\n\r\n==> /var/log/opscode/opscode-erchef/current <==\r\n2015-04-29_14:23:38.76315 [error] {<<\"method=POST; path=/authenticate_user; status=500; \">>,{error,{error,badarg,[{erlang,iolist_to_binary,[[null,\"--\",<<\"PASSWORD_REMOVED_BY_ME\">>,\"--\"]],[]},{crypto,hash,2,[{file,\"crypto.erl\"},{line,228}]},{chef_password,sha1,3,[{file,\"src/chef_password.erl\"},{line,104}]},{chef_password,verify,2,[{file,\"src/chef_password.erl\"},{line,92}]},{oc_chef_wm_authenticate_user,verify_user,5,[{file,\"src/oc_chef_wm_authenticate_user.erl\"},{line,99}]},{oc_chef_wm_authenticate_user,process_post,2,[{file,\"src/oc_chef_wm_authenticate_user.erl\"},{line,87}]},{webmachine_resource,resource_call,3,[{file,\"src/webmachine_resource.erl\"},{line,186}]},{webmachine_resource,do,3,[{file,\"src/webmachine_resource.erl\"},{line,142}]}]}}}\r\n```\r\n\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/chef/chef-server/issues/comments/123037510","html_url":"https://github.com/chef/chef-server/issues/156#issuecomment-123037510","issue_url":"https://api.github.com/repos/chef/chef-server/issues/156","id":123037510,"user":{"login":"jeremiahsnapp","id":430911,"avatar_url":"https://avatars.githubusercontent.com/u/430911?v=3","gravatar_id":"","url":"https://api.github.com/users/jeremiahsnapp","html_url":"https://github.com/jeremiahsnapp","followers_url":"https://api.github.com/users/jeremiahsnapp/followers","following_url":"https://api.github.com/users/jeremiahsnapp/following{/other_user}","gists_url":"https://api.github.com/users/jeremiahsnapp/gists{/gist_id}","starred_url":"https://api.github.com/users/jeremiahsnapp/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jeremiahsnapp/subscriptions","organizations_url":"https://api.github.com/users/jeremiahsnapp/orgs","repos_url":"https://api.github.com/users/jeremiahsnapp/repos","events_url":"https://api.github.com/users/jeremiahsnapp/events{/privacy}","received_events_url":"https://api.github.com/users/jeremiahsnapp/received_events","type":"User","site_admin":false},"created_at":"2015-07-20T21:02:53Z","updated_at":"2015-07-20T21:02:53Z","body":"@stevendanna I'm running Chef Server 12.1.0 and erchef still logs the password when logging into a broken user account."}}