Collins
Posts: 136
Joined: Wed Oct 12, 2016 2:57 pm

AI_USER_CHECK_PASSWORD To Not Log Value

Fri Jul 15, 2022 3:16 pm

Hello,

I have a project that uses the built in CheckUserCredentails custom action. I recently noticed that in the log file when AI_USER_CHECK_PASSWORD runs, it places all the values in the log, even the password.

AI_USER_CHECK_PASSWORD1AI_USER_IGNORE_FULLNAME1AI_USER_IGNORE_MSI1AI_USER_IS_GROUPDOMAIN_NAMEUSER_NAMEserviceUSER_PASSWORDpassword'.

The USER_PASSWORD prop has the hide property attribute set. Can this be changed so that it doesn't log value of USER_PASSWORD when that custom action validates the password?

Catalin
Posts: 5187
Joined: Wed Jun 13, 2018 7:49 am

Re: AI_USER_CHECK_PASSWORD To Not Log Value

Fri Jul 15, 2022 3:49 pm

Hello Les,

If possible, could you please give me a test-case which I can use to reproduce this on my end, as the scenario is not quite clear for me?

Best regards,
Catalin
Catalin Gheorghe - Advanced Installer Team
Follow us: Twitter - Facebook - YouTube

Collins
Posts: 136
Joined: Wed Oct 12, 2016 2:57 pm

Re: AI_USER_CHECK_PASSWORD To Not Log Value

Mon Jul 18, 2022 2:24 pm

Hi Catalin,

I have emailed you and attached the log, AIP and the steps used by the end user.

Catalin
Posts: 5187
Joined: Wed Jun 13, 2018 7:49 am

Re: AI_USER_CHECK_PASSWORD To Not Log Value

Mon Jul 18, 2022 3:08 pm

Hello Les,

Thank you for your project file and for the explanation.

I have forwarded your request to our dev team.

Best regards,
Catalin
Catalin Gheorghe - Advanced Installer Team
Follow us: Twitter - Facebook - YouTube

Catalin
Posts: 5187
Joined: Wed Jun 13, 2018 7:49 am

Re: AI_USER_CHECK_PASSWORD To Not Log Value

Tue Jul 26, 2022 7:33 am

Hello Les,

After further investigations, it seems we were able to find a workaround for this issue.

In order to hide that property from the log file, we can make use of the "MsiHiddentProperties" property.

Basically, we can append the CustomActionData property to the MsiHiddenProperties and it will no longer be displayed in the log file.
MsiHiddenProperties.png
MsiHiddenProperties.png (95.09KiB)Viewed 1003 times
Hope this helps!

Best regards,
Catalin
Catalin Gheorghe - Advanced Installer Team
Follow us: Twitter - Facebook - YouTube

Collins
Posts: 136
Joined: Wed Oct 12, 2016 2:57 pm

Re: AI_USER_CHECK_PASSWORD To Not Log Value

Wed Aug 03, 2022 8:44 pm

Thank you for the workaround Catalin. I will apply it to the projects that use that dialog.

Catalin
Posts: 5187
Joined: Wed Jun 13, 2018 7:49 am

Re: AI_USER_CHECK_PASSWORD To Not Log Value

Thu Aug 04, 2022 10:08 am

You are always welcome, Les!

Glad I was able to help.

Best regards,
Catalin
Catalin Gheorghe - Advanced Installer Team
Follow us: Twitter - Facebook - YouTube

Return to “Feature Requests”