Ask a questionAsk a question
 

AnswerSecurity Issue with TFSJobAgent.InstallLog

  • Thursday, November 05, 2009 10:08 PMRyan Jaeger Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Hi,

    The typical install logs don't show account passwords in plain text; however, if you locate the TFSJobAgent.InstallLog the account password shows in plain text.

    Cheers,

    Ryan
    • Moved byEd Holloway - MSFTMSFTFriday, November 06, 2009 3:34 PM (From:Microsoft Visual Studio Team Foundation Server 2010 Beta 2)
    •  

Answers

  • Friday, November 06, 2009 3:18 PMBryan MacFarlane MSFT Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    This looks like a bug in the framework installutil.  We pass /installlog= and use console output logging and strip the password.  The ndp bug is they are not respecting the call to not log (it's in the command line help).  This must have been a late breaking beta2 framework bug.  We will work with the framework team.

    Bryan

All Replies

  • Friday, November 06, 2009 3:18 PMBryan MacFarlane MSFT Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    This looks like a bug in the framework installutil.  We pass /installlog= and use console output logging and strip the password.  The ndp bug is they are not respecting the call to not log (it's in the command line help).  This must have been a late breaking beta2 framework bug.  We will work with the framework team.

    Bryan
  • Friday, November 06, 2009 3:35 PMEd Holloway - MSFTMSFTUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Moving to the Framework team forum.