Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[FEATURE REQUEST] Paranoid logging mode #874

Open
nitnelave opened this issue Mar 18, 2024 · 0 comments
Open

[FEATURE REQUEST] Paranoid logging mode #874

nitnelave opened this issue Mar 18, 2024 · 0 comments
Labels
documentation Improvements or additions to documentation enhancement New feature or request good first issue Good for newcomers help wanted Extra attention is needed rust Pull requests that update Rust code

Comments

@nitnelave
Copy link
Member

Motivation
Most people don't want to share actual domain names/user names/emails when reporting an issue. Yet they appear in the logs. In general though, they are useful for an admin: they want the actual information. We need something to sanitize the logs before sharing them.

Describe the solution you'd like
I can think of 2 ways to do it:

  • the intrusive way, with an LLDAP config option that affects everything that gets logged, in depth. That would likely require rewriting debug representations for almost every struct we manipulate, not great.
  • the post-processing way: a bunch of regex, guided by the configuration, to remove common known patterns of information leak, potentially replacing them with stable obfuscated identifiers (so that we can still correlate them). Maybe as an LLDAP subcommand rather than a separate tool so that it would read the config? Although the values we read are few and stable, it's probably better to just make it a separate tool. This can potentially miss values to sanitize, though.
@nitnelave nitnelave added documentation Improvements or additions to documentation enhancement New feature or request good first issue Good for newcomers help wanted Extra attention is needed rust Pull requests that update Rust code labels Mar 18, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
documentation Improvements or additions to documentation enhancement New feature or request good first issue Good for newcomers help wanted Extra attention is needed rust Pull requests that update Rust code
Projects
None yet
Development

No branches or pull requests

1 participant