# Password for DB connection showing in syslog

**URL:** <https://discourse.nodered.org/t/password-for-db-connection-showing-in-syslog/94584>\
**Category:** General\
**Tags:** security\
**Created:** [13 January 2025 16:28 UTC](https://discourse.nodered.org/t/password-for-db-connection-showing-in-syslog/94584 "2025-01-13T16:28:22Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![mattuns](https://avatars.discourse-cdn.com/v4/letter/m/fbc32d/32.png) [@mattuns](https://discourse.nodered.org/u/mattuns)\
**Post date:** [13 January 2025 16:28 UTC](https://discourse.nodered.org/t/password-for-db-connection-showing-in-syslog/94584/1 "2025-01-13T16:28:22Z")

</div>

Hi,

While troubleshooting a server issue I noticed that the linux syslog (/var/log/messages) periodically shows the full connection details for our DB connections.

I tried reducing the logging level but even when "off" the DB connections are still showing.

Is there a method of disabling this?  
Extract from log with details removed:

Jan 13 14:54:09 app-t-nodered01 Node-RED[801421]: {  
Jan 13 14:54:09 app-t-nodered01 Node-RED[801421]: user: '',  
Jan 13 14:54:09 app-t-nodered01 Node-RED[801421]: password: '\<password\_in\_clear\>',  
Jan 13 14:54:09 app-t-nodered01 Node-RED[801421]: domain: '',  
Jan 13 14:54:09 app-t-nodered01 Node-RED[801421]: server: '\<DB\_server\_name\>',  
Jan 13 14:54:09 app-t-nodered01 Node-RED[801421]: database: '',  
Jan 13 14:54:09 app-t-nodered01 Node-RED[801421]: options: { encrypt: false, useUTC: undefined }  
Jan 13 14:54:09 app-t-nodered01 Node-RED[801421]: }

Thanks in advance

---

<div class="post-metadata">

**Author:** ![dceejay](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/dceejay/32/38_2.png) [@dceejay](https://discourse.nodered.org/u/dceejay)\
**Post date:** [13 January 2025 16:45 UTC](https://discourse.nodered.org/t/password-for-db-connection-showing-in-syslog/94584/2 "2025-01-13T16:45:25Z")

</div>

Which DB node are you using to make that connection ?

---

<div class="post-metadata">

**Author:** ![mattuns](https://avatars.discourse-cdn.com/v4/letter/m/fbc32d/32.png) [@mattuns](https://discourse.nodered.org/u/mattuns)\
**Post date:** [13 January 2025 16:57 UTC](https://discourse.nodered.org/t/password-for-db-connection-showing-in-syslog/94584/3 "2025-01-13T16:57:29Z")

</div>

MSSQL Node, node-red-contrib-mssql-plus

v0.0.7 I think

---

<div class="post-metadata">

**Author:** ![Steve-Mcl](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/steve-mcl/32/4826_2.png) [@Steve-Mcl](https://discourse.nodered.org/u/Steve-Mcl)\
**Post date:** [13 January 2025 17:04 UTC](https://discourse.nodered.org/t/password-for-db-connection-showing-in-syslog/94584/4 "2025-01-13T17:04:22Z")

</div>

> [@mattuns](#):
>
> v0.0.7 I think

Maybe try latest version: Version: 0.12.2

---

<div class="post-metadata">

**Author:** ![mattuns](https://avatars.discourse-cdn.com/v4/letter/m/fbc32d/32.png) [@mattuns](https://discourse.nodered.org/u/mattuns)\
**Post date:** [13 January 2025 17:10 UTC](https://discourse.nodered.org/t/password-for-db-connection-showing-in-syslog/94584/5 "2025-01-13T17:10:52Z")

</div>

> [@mattuns](#):
>
> node-red-contrib-mssql-plus

Thanks, will give it a go tomorrow

---

<div class="post-metadata">

**Author:** ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)\
**Post date:** [13 January 2025 17:13 UTC](https://discourse.nodered.org/t/password-for-db-connection-showing-in-syslog/94584/6 "2025-01-13T17:13:15Z")

</div>

And if the new version still does the same thing, you will need to raise an issue with the author on the GitHub repo.

---

<div class="post-metadata">

**Author:** ![mattuns](https://avatars.discourse-cdn.com/v4/letter/m/fbc32d/32.png) [@mattuns](https://discourse.nodered.org/u/mattuns)\
**Post date:** [14 January 2025 09:24 UTC](https://discourse.nodered.org/t/password-for-db-connection-showing-in-syslog/94584/7 "2025-01-14T09:24:43Z")

</div>

Thanks both. I've updated and it has made no difference so will contact the author as suggested.

Appreciate the assistance!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/1X/d073cd938eafa2e558d7c2cd59003b3ef4963033.png) [@system](https://discourse.nodered.org/u/system)\
**Post date:** [14 April 2025 09:24 UTC](https://discourse.nodered.org/t/password-for-db-connection-showing-in-syslog/94584/8 "2025-04-14T09:24:56Z")

</div>

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.