Ability to emit warnings in debug mode
Hi, I have an odd question... I know in the case of the 'cui' and the 'moonshot-targeted-ids' policies, there is a salt value that is by default 'changeme'. Is there any ability for a policy to emit a warning in debug mode when it finds that one of its components is not changed from the default 'changeme'? Just a thought... I want to make sure that those deploying the latter policy are warned before/prevented from using the policy when the salt is not changed. With Regards Stefan Paetow Moonshot Industry & Research Liaison Coordinator t: +44 (0)1235 822 125 gpg: 0x3FCE5142 xmpp: stefanp@jabber.dev.ja.net skype: stefan.paetow.janet jisc.ac.uk Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc¹s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800.
Hi,
I have an odd question... I know in the case of the 'cui' and the 'moonshot-targeted-ids' policies, there is a salt value that is by default 'changeme'. Is there any ability for a policy to emit a warning in debug mode when it finds that one of its components is not changed from the default 'changeme'?
Just a thought... I want to make sure that those deploying the latter policy are warned before/prevented from using the policy when the salt is not changed.
better still, dont let it run if the policy is the default...... ie set the value as a variable...and then check if that value is the default and stop the server running....a hard exit. not just a warning.....as its a salt..and totally pointless if its a known value. some may say its too harsh...is which case, just set the request to a reject if the salt is the default value.... alan
On Oct 17, 2016, at 11:07 AM, Stefan Paetow <Stefan.Paetow@jisc.ac.uk> wrote:
I have an odd question... I know in the case of the 'cui' and the 'moonshot-targeted-ids' policies, there is a salt value that is by default 'changeme'. Is there any ability for a policy to emit a warning in debug mode when it finds that one of its components is not changed from the default 'changeme'?
Change it to a reference that doesn't exist. targeted_id_salt = "${changeme}" Since variable "changeme" doesn't exist, the server won't start unless it's edited. And then be sure that the docs say "change it, DON"T add a variable called 'changeme'" Alan DeKok.
participants (3)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan DeKok -
Stefan Paetow