[SAC] [OSGeo] #2342: OSGeo UserID registration logs contain unusable IP address

OSGeo trac_osgeo at osgeo.org
Thu Aug 22 00:42:19 PDT 2019


#2342: OSGeo UserID registration logs contain unusable IP address
---------------------------+----------------------------------------
 Reporter:  strk           |       Owner:  sac@…
     Type:  task           |      Status:  new
 Priority:  critical       |   Milestone:  Sysadmin Contract 2019-II
Component:  Systems Admin  |  Resolution:
 Keywords:  ldap           |
---------------------------+----------------------------------------
Changes (by strk):

 * priority:  normal => critical
 * milestone:   => Sysadmin Contract 2019-II


Comment:

 The problem also affects the email sent to the registering user, which
 would be told that "someone from <internal_ip> requested an OSGeo account
 creation". This is a security issue as well as a user-facing issue.

-- 
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2342#comment:1>
OSGeo <https://osgeo.org/>
OSGeo committee and general foundation issue tracker.


More information about the Sac mailing list