dovecot-1.2: auth_debug_passwords=yes: If auth bind fails, log t...

[dovecot at dovecot.org]

details:   http://hg.dovecot.org/dovecot-1.2/rev/eaf8c93be56e
changeset: 8710:eaf8c93be56e
user:      Timo Sirainen <tss at iki.fi>
date:      Wed Feb 04 12:30:07 2009 -0500
description:
auth_debug_passwords=yes: If auth bind fails, log the attempted password.

diffstat:

1 file changed, 8 insertions(+), 2 deletions(-)
src/auth/passdb-ldap.c |   10 ++++++++--

diffs (27 lines):

diff -r 323c8eff78d4 -r eaf8c93be56e src/auth/passdb-ldap.c
--- a/src/auth/passdb-ldap.c	Wed Feb 04 12:23:55 2009 -0500
+++ b/src/auth/passdb-ldap.c	Wed Feb 04 12:30:07 2009 -0500
@@ -155,6 +155,7 @@ ldap_auth_bind_callback(struct ldap_conn
 		(struct passdb_ldap_request *)ldap_request;
 	struct auth_request *auth_request = ldap_request->auth_request;
 	enum passdb_result passdb_result;
+	const char *str;
 	int ret;
 
 	passdb_result = PASSDB_RESULT_INTERNAL_FAILURE;
@@ -164,8 +165,13 @@ ldap_auth_bind_callback(struct ldap_conn
 		if (ret == LDAP_SUCCESS)
 			passdb_result = PASSDB_RESULT_OK;
 		else if (ret == LDAP_INVALID_CREDENTIALS) {
-			auth_request_log_info(auth_request, "ldap",
-					      "invalid credentials");
+			str = "invalid credentials";
+			if (auth_request->auth->verbose_debug_passwords) {
+				str = t_strconcat(str, " (given password: ",
+						  auth_request->mech_password,
+						  ")", NULL);
+			}
+			auth_request_log_info(auth_request, "ldap", "%s", str);
 			passdb_result = PASSDB_RESULT_PASSWORD_MISMATCH;
 		} else {
 			auth_request_log_error(auth_request, "ldap",