Brief Description
When the cookbook applies the sssd.conf template, it is not marked as sensitive even if the ldap_default_authtok attribute is set. This results in credentials showing up in Chef logs.
Cookbook version
5.2.6
Chef-Infra Version
18.3.0
Platform details
Rocky Linux 8.8
Steps To Reproduce
Set node['sssd_ldap']['sssd_conf']['default_ldap_authtok'] and run the cookbook.
Expected behavior
When the default_ldap_authtok attribute is set, the sssd.conf template resource should get marked sensitive and not include a diff output.
Brief Description
When the cookbook applies the sssd.conf template, it is not marked as sensitive even if the
ldap_default_authtokattribute is set. This results in credentials showing up in Chef logs.Cookbook version
5.2.6
Chef-Infra Version
18.3.0
Platform details
Rocky Linux 8.8
Steps To Reproduce
Set
node['sssd_ldap']['sssd_conf']['default_ldap_authtok']and run the cookbook.Expected behavior
When the
default_ldap_authtokattribute is set, the sssd.conf template resource should get marked sensitive and not include a diff output.