[prev in list] [next in list] [prev in thread] [next in thread] 

List:       dovecot
Subject:    Re: [Dovecot] Deliver prints passwort to the syslog
From:       Timo Sirainen <tss () iki ! fi>
Date:       2007-09-18 13:52:57
Message-ID: 1190123577.5802.376.camel () hurina
[Download RAW message or body]


On Tue, 2007-09-18 at 12:16 +0200, Dominik Schulz wrote:
> Hi,
> I've got the problem that dovecot's deliver prints the authentification 
> information to the syslog.
> 
> Like this:
> Sep 18 12:11:22 mail deliver(user@domain.tld): auth input: 
> user=user@domain.tld
> Sep 18 12:11:22 mail deliver(user@domain.tld): auth input: password=XXXX
> Sep 18 12:11:22 mail deliver(user@domain.tld): auth input: 
> home=/home/mail/domain.tld/user
> Sep 18 12:11:22 mail deliver(user@domain.tld): auth input: uid=8
> Sep 18 12:11:22 mail deliver(user@domain.tld): auth input: gid=8
> 
> I guess that it's only a configuration option but right now I can't figure out 
> which one I need to change to turn this off.

First of all it shouldn't be sent to deliver in the first place. What
userdb do you use and with what kind of a configuration? It shouldn't
return password field.

Once you've got that fixed, you can unset auth_debug=yes.


["signature.asc" (application/pgp-signature)]

[prev in list] [next in list] [prev in thread] [next in thread]