Title:
ColdFusion erroneously writes LDAP error messages to server.log and exception.log
| View in TrackerProblem Description:
Each time an LDAP login attempt fails, ColdFusion writes the corresponding error message to server.log and to exception.log. This is erroneous.
There is, especially, no justification for logging LDAP errors in server.log!
Steps to Reproduce:
Set up your ColdFusion instance in the usual way to use LDAP authentication. Then deliberately attempt to log in with, say, 10 invalid login credentials.
Then examine your exception.log and server.log. See attached examples.
Actual Result:
The LDAP errors are logged to exception.log and server.log.
Expected Result:
LDAP errors SHOULD NOT be logged to exception.log or to server.log. Especially not to server.log, where they stick out like a sore thumb.
The ColdFusion Team might want to create a separate log file for such Java errors.
Any Workarounds:
Not relevant.
Attachments:
Comments: