You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The Guest Principal is created with a name of the form Guest@[IP_ADDR] which leaks information about Guest access when files are ingested and the PoC field is filled in. We should obfuscate the IP Addresses of Guest Principals.
Update the STS Guest Validator to set the Principal name to Guest@[RANDOM]
Write a security audit record of the form Mapping IP Addr [XXXX] to Internal ID [200f7e55Xda24X4ec3X8e9fX2bad7393fd53]
Prevent a small secondary issue where Guest@ is sometimes prepended twice to the id on the principal's name
Cache the generated token for a reasonable period so it can be reused instead of a new random id being created and logged on each Guest access
The text was updated successfully, but these errors were encountered:
This is a duplicate of this Jira issue for testing purposes
The Guest Principal is created with a name of the form
Guest@[IP_ADDR]
which leaks information about Guest access when files are ingested and the PoC field is filled in. We should obfuscate the IP Addresses of Guest Principals.Guest@[RANDOM]
Mapping IP Addr [XXXX] to Internal ID [200f7e55Xda24X4ec3X8e9fX2bad7393fd53]
Guest@
is sometimes prepended twice to the id on the principal's nameThe text was updated successfully, but these errors were encountered: