inside laravel application, when binding exception, or ldap exception occurs prints credentials log:
[2016-07-14 19:30:35] local.error: exception 'bindexception' message 'can't contact ldap server' stack trace: #0 guard.php(102): ldap_bind('admin', 'password', '', '@corp.acme.org')
is there way avoid rather catching exceptions?
maybe way 'pre-hash' password send through bind request it's not readable logs? possible?
or shouldn't worried because logs accessible people have physical / remote access server?
Comments
Post a Comment