Miscellaneous first checks

• I checked that all ports are open and not blocked by my ISP / hosting provider.
• I know that SSL errors are likely the result of a wrong setup on the user side and not caused by DMS itself. I'm confident my setup is correct.

Affected Component(s)

cleartext password in log

What happened and when does this occur?

At container startup LDAP bind password shows up in log as cleartext at LOG_LEVEL=info.

What did you expect to happen?

No LDAP bind password shows up in log as cleartext at LOG_LEVEL=info.

How do we replicate the issue?

1. Configure LDAP_* env vars
2. Start up container
3. Look at logs

DMS version

v11.1.0

What operating system is DMS running on?

Linux

What instruction set architecture is DMS running on?

x86_64 / AMD64

What container orchestration tool are you using?

Docker

docker-compose.yml

No response

Relevant log output

>> /etc/postfix/ldap-users.cf: saslauthd_ldap_password = myLdapBindPass
>> /etc/postfix/ldap-users.cf: bind_pw = myLdapBindPass
>> /etc/postfix/ldap-groups.cf: saslauthd_ldap_password = myLdapBindPass
>> /etc/postfix/ldap-groups.cf: bind_pw = myLdapBindPass
>> /etc/postfix/ldap-aliases.cf: saslauthd_ldap_password = myLdapBindPass
>> /etc/postfix/ldap-aliases.cf: bind_pw = myLdapBindPass
>> /etc/postfix/ldap-domains.cf: saslauthd_ldap_password = myLdapBindPass
>> /etc/postfix/ldap-domains.cf: bind_pw = myLdapBindPass
>> /etc/postfix/ldap-senders.cf: saslauthd_ldap_password = myLdapBindPass
>> /etc/postfix/ldap-senders.cf: bind_pw = myLdapBindPass
>> /etc/dovecot/dovecot-ldap.conf.ext: dnpass = myLdapBindPass

Other relevant information

I'm using read-only service account created exclusively for docker-mailserver, but someone less experienced may use personal or even domain admin account for ldap bind and leak his password through the log.

What level of experience do you have with Docker and mail servers?

• I am inexperienced with docker
• I am inexperienced with mail servers
• I am uncomfortable with the CLI

Code of conduct

• I have read this project's Code of Conduct and I agree
• I have read the README and the documentation and I searched the issue tracker but could not find a solution

Improvements to this form?

No response