-
Notifications
You must be signed in to change notification settings - Fork 125
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Per-SP configuration for LDAP attribute store microservice #60
Per-SP configuration for LDAP attribute store microservice #60
Conversation
Added functionality to the LDAP attribute store microservice so that all details include the LDAP directory details can be configured on a per-SP basis. Also added better logging.
config = self.config[spEntityID] | ||
configClean = copy.deepcopy(config) | ||
if 'bind_password' in configClean: | ||
configClean['bind_password'] = 'XXXXXXXX' |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
As asked above, is this line a leftover from debugging?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
No. The intent is to log the configuration at the DEBUG level but blank out any bind password included in the configuration so that passwords are never logged.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
OK, thanks for the explanation, I see now how it's used while logging.
config = self.config | ||
configClean = copy.deepcopy(config) | ||
if 'bind_password' in configClean: | ||
configClean['bind_password'] = 'XXXXXXXX' |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Is this, together with the similar line at the comment below, a leftover from debugging?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
No. The intent is to log the configuration at the DEBUG level but blank out any bind password included in the configuration so that passwords are never logged.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
OK, thanks for the explanation, I see now how it's used while logging.
Added functionality to the LDAP attribute store microservice
so that all details include the LDAP directory details can
be configured on a per-SP basis. Also added better logging.