Password is visible in the log file

[Lin Hua Cheng]

Using Horizon, I turned on the DEBUG flag for python-keystoneclient. I noticed that the password are logged in plain text.

Output from the log file:

REQ : curl -i http://127.0.0.1:5000/v3/auth/tokens -X POST -H "Content-Type: application/json" -H "User-Agent: python-keystoneclient"
REQ BODY: {"auth": {"identity": {"methods": ["password"], "password": {"user": {"domain": {"name": "Default"}, "name": "admin", "password": "123456"}}}}}

Keystone-client should mask or hide the password value.

[Jeremy Stanley (fungi)]

Since this is already documented behavior ( http://docs.openstack.org/developer/horizon/topics/deployment.html ), I'm marking the bug public. I couldn't quite tell whether it's best marked a duplicate of bug 1004114, or whether it merits separate treatment (a la bug 1104313 and bug 1172195).

[Dolph Mathews (dolph)]

Added python-keystoneclient as being impacted by bug 1004114