Suds log may contain vCenter session details

[Vipin Balachandran]

Failure while calling vCenter SessionManager.SessionIsActive resulted in following logs:

2015-06-28 19:51:33.330 27190 ERROR suds.client [-] <?xml version="1.0" encoding="UTF-8"?>
<SOAP-ENV:Envelope xmlns:ns0="urn:vim25" xmlns:ns1="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/">
   <ns1:Body>
      <ns0:SessionIsActive>
         <ns0:_this type="SessionManager">SessionManager</ns0:_this>
         <ns0:sessionID>52cafa27-80de-b09c-1c1c-dbbddbf9fd5a</ns0:sessionID>
         <ns0:userName>Administrator</ns0:userName>
      </ns0:SessionIsActive>
   </ns1:Body>

[Vipin Balachandran (vbala)]

https://review.openstack.org/#/c/198610/

[Eric Brown (ericwb)]

Does the password ever get logged or just the user name? If password, probably more serious and should be marked as security bug.

[Vipin Balachandran (vbala)]

I tried with invalid credentials and suds is logging username and password.

[Davanum Srinivas (DIMS) (dims-v)]

https://review.openstack.org/#/c/198610/ has merged.