This has come up before quite recently(May 2013) in a DTF CA with a ConnectionString.
Custom action code can interface with the MSI log to create entries there, and because they just log a string they see they don't know whether the content is private or not, and they do not participate in the MSI secure property scheme. Arguably, custom action code could be a bit more sensitive to this kind of thing because it probably knows that there is account information in the data. Phil -----Original Message----- From: Brian C [mailto:briancoving...@yahoo.com] Sent: Wednesday, June 05, 2013 9:04 AM To: General discussion for Windows Installer XML toolset. Subject: [WiX-users] This seems like a bug, but wanted to post here first We have a ComPlusApplication which has an Identity and Password. The values for these are logged in plain test in the msi log file, not encrypted. Am I missing something on the ComPlusApplication which allows for hiding these values? For the Username and Password properties that are entered, there is a Hidden attribute, which correctly hides those values: MSI (s) (00:A8) [10:18:26:899]: PROPERTY CHANGE: Modifying NAMEGENUSERNAME property. Its current value is '**********'. Its new value: '**********'. MSI (s) (00:A8) [10:18:26:899]: PROPERTY CHANGE: Modifying NAMEGENPASSWORD property. Its current value is '**********'. Its new value: '**********'. but when those values are passed to the ComPlusApplication custom action, those values are displayed in plain text: MSI (s) (00:A8) [10:18:33:887]: Executing op: ActionStart(Name=ComPlusInstallExecute,Description=Registering COM+ components,) MSI (s) (00:A8) [10:18:33:887]: Executing op: CustomActionSchedule(Action=ComPlusInstallExecute,ActionType=3073,Source=Bin aryData,Target=ComPlusInstallExecute,CustomActionData=C:\Users\myuser\AppDat a\Local\Temp\CPI693DC06DC8.tmpCreateComPlusPartitionsCreating COM+ partitionsPartition: [1]0AddUsersToComPlusPartitionRolesAdding users to COM+ partition rolesRole: [1]0AddComPlusPartitionUsersSetting default COM+ partitions for usersUser: [1]0CreateComPlusApplicationsCreating COM+ applicationsApplication: [1]1110000x32NameGenerator{5D401BD0-554F-4CD4-AA8C-5A223340E1C2}SP3DNameGene rator4ApplicationAccessChecksEnabled0RunForever1IdentityMYUSERNAMEPasswordMY PASSWORDCreateComPlusApplicationRolesCreating COM+ application rolesRole: [1]0AddUsersToComPlusApplicationRolesAdding users to COM+ application rolesUser: [1]0RegisterComPlusAssembliesRegistering COM+ componentsDLL: [1]1150000x32NameGeneratorC:\Program Files (x86)\Smart3D\CommonApp\Server\Bin\NTNameService.dll0{5D401BD0-554F-4CD4-AA8 C-5A223340E1C2}1{975045DE-9237-4F30-9458- MSI (s) (00:F8) [10:18:33:903]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI7004.tmp, Entrypoint: ComPlusInstallExecute ComPlusInstallExecute: Entering ComPlusInstallExecute in C:\Windows\Installer\MSI7004.tmp, version 3.6.3303.0 ComPlusInstallExecute: Creating application, key: x32NameGenerator ComPlusInstallExecute: 1 changes saved to catalog, key: x32NameGenerator ComPlusInstallExecute: Registering assembly, key: x32NameGenerator Any ideas on what I am missing? Thanks in advance, Brian ---------------------------------------------------------------------------- -- How ServiceNow helps IT people transform IT departments: 1. A cloud service to automate IT design, transition and operations 2. Dashboards that offer high-level views of enterprise services 3. A single system of record for all IT processes http://p.sf.net/sfu/servicenow-d2d-j _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users ------------------------------------------------------------------------------ How ServiceNow helps IT people transform IT departments: 1. A cloud service to automate IT design, transition and operations 2. Dashboards that offer high-level views of enterprise services 3. A single system of record for all IT processes http://p.sf.net/sfu/servicenow-d2d-j _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
