Password displayed using System.out.println or Logger. How to hidethis ?

[pramodr]

Hi group,

I have an application running Tomcat 5.5 which is under testing now.
The container managed security feature is enabled in web.xml. The
supplied username and password is authenticated against an LDAP
server. The logger displays the username and password. However it is
better to scramble or hide the password for security reasons when this
goes to production. What are the possible solutions for this ? Is it
possible without modifying the code at all (like enable https or like
that) ?

regards
Pramod

 

[Marcin Rze¼nicki]

Hi group,

I have an application running Tomcat 5.5 which is under testing now.
The container managed security feature is enabled in web.xml. The
supplied username and password is authenticated against an LDAP
server. The logger displays the username and password. However it is
better to scramble or hide the password for security reasons when this
goes to production. What are the possible solutions for this ? Is it
possible without modifying the code at all (like enable https or like
that) ?

You can usually modify logger level using configuration files without
touching your code. If you reveal what logging package this
application uses, we can guide you better.