Fix dynaconf obfuscation and add AUTH_LDAP_BIND_PASSWORD

Signed-off-by: Dr. Jason Breitweg <[email protected]> Fixed style issues Signed-off-by: Jason Breitweg [email protected] Signed-off-by: Dr. Jason Breitweg <[email protected]> Fixed yet more linting errors Signed-off-by: Jason Breitweg [email protected] Signed-off-by: Dr. Jason Breitweg <[email protected]>
sosreport · Oct 10, 2023 · c6ab24e · c6ab24e
1 parent 72635ef
commit c6ab24e
Showing 1 changed file with 6 additions and 3 deletions.
diff --git a/sos/report/plugins/pulp.py b/sos/report/plugins/pulp.py
@@ -170,10 +170,13 @@ def postproc(self):
         repl = r"\1********"
         self.do_path_regex_sub("/etc/pulp(.*)(.json$)", jreg, repl)
 
-        # obfuscate SECRET_KEY = .. and 'PASSWORD': .. in dynaconf list output
-        # and also in settings.py
+        # obfuscate SECRET_KEY = .., 'PASSWORD': ..,
+        # and AUTH_LDAP_BIND_PASSWORD = ..
+        # in dynaconf list output and also in settings.py
         # count with option that PASSWORD is with(out) quotes or in capitals
-        key_pass_re = r"(SECRET_KEY\s*=|(password|PASSWORD)(\"|'|:)+)\s*(\S*)"
+        key_pass_re = r"((?:SECRET_KEY|AUTH_LDAP_BIND_PASSWORD)" \
+                      r"(?:\<.+\>)?(\s*=)?|(password|PASSWORD)" \
+                      r"(\"|'|:)+)\s*(\S*)"
         repl = r"\1 ********"
         self.do_path_regex_sub("/etc/pulp/settings.py", key_pass_re, repl)
         self.do_cmd_output_sub("dynaconf list", key_pass_re, repl)