Password for DB connection showing in syslog

General
1

Hi,

While troubleshooting a server issue I noticed that the linux syslog (/var/log/messages) periodically shows the full connection details for our DB connections.

I tried reducing the logging level but even when "off" the DB connections are still showing.

Is there a method of disabling this?
Extract from log with details removed:

Jan 13 14:54:09 app-t-nodered01 Node-RED[801421]: {
Jan 13 14:54:09 app-t-nodered01 Node-RED[801421]: user: '',
Jan 13 14:54:09 app-t-nodered01 Node-RED[801421]: password: '<password_in_clear>',
Jan 13 14:54:09 app-t-nodered01 Node-RED[801421]: domain: '',
Jan 13 14:54:09 app-t-nodered01 Node-RED[801421]: server: '<DB_server_name>',
Jan 13 14:54:09 app-t-nodered01 Node-RED[801421]: database: '',
Jan 13 14:54:09 app-t-nodered01 Node-RED[801421]: options: { encrypt: false, useUTC: undefined }
Jan 13 14:54:09 app-t-nodered01 Node-RED[801421]: }

Thanks in advance

2

Which DB node are you using to make that connection ?

3

MSSQL Node, node-red-contrib-mssql-plus

v0.0.7 I think

4

Maybe try latest version: Version: 0.12.2

5

Thanks, will give it a go tomorrow

6

And if the new version still does the same thing, you will need to raise an issue with the author on the GitHub repo.

7

Thanks both. I've updated and it has made no difference so will contact the author as suggested.

Appreciate the assistance!