Return
-
Title
How to prevent passwords from displaying in the EDM event log? -
Description
Under certain conditions passwords for accounts may display in the EDM Event Log. For example Event ID:2691 and Event ID:2701 may show the passwords.
-
Cause
Product limitation -
Resolution
Workaround:
- Using the ActiveRoles Server MMC, navigate to Configuration | Server Configuration | Virtual Attributes
- Find the attribute that is being used to store the password and open Advanced properties
- Find the attribute named edsaAttributeFlags and set to 18.
- Save the new value. Restart the ActiveRoles Server service
Setting up ValueIsSecured bit will prevent this attribute to be logged to ds.log, Event log and Change History