[Dovecot] Deliver prints passwort to the syslog
Hi, I've got the problem that dovecot's deliver prints the authentification information to the syslog.
Like this: Sep 18 12:11:22 mail deliver(user@domain.tld): auth input: user=user@domain.tld Sep 18 12:11:22 mail deliver(user@domain.tld): auth input: password=XXXX Sep 18 12:11:22 mail deliver(user@domain.tld): auth input: home=/home/mail/domain.tld/user Sep 18 12:11:22 mail deliver(user@domain.tld): auth input: uid=8 Sep 18 12:11:22 mail deliver(user@domain.tld): auth input: gid=8
I guess that it's only a configuration option but right now I can't figure out which one I need to change to turn this off.
Any help would be appreciated. Thanks in advance.
Best Regards Dominik
On 2007-09-18 12:16:00 +0200, Dominik Schulz wrote:
I've got the problem that dovecot's deliver prints the authentification information to the syslog.
Like this: Sep 18 12:11:22 mail deliver(user@domain.tld): auth input: user=user@domain.tld Sep 18 12:11:22 mail deliver(user@domain.tld): auth input: password=XXXX Sep 18 12:11:22 mail deliver(user@domain.tld): auth input: home=/home/mail/domain.tld/user Sep 18 12:11:22 mail deliver(user@domain.tld): auth input: uid=8 Sep 18 12:11:22 mail deliver(user@domain.tld): auth input: gid=8
I guess that it's only a configuration option but right now I can't figure out which one I need to change to turn this off.
Any help would be appreciated. Thanks in advance.
grep auth /path/to/dovecot.conf
darix
-- openSUSE - SUSE Linux is my linux openSUSE is good for you www.opensuse.org
On Tue, 2007-09-18 at 12:16 +0200, Dominik Schulz wrote:
Hi, I've got the problem that dovecot's deliver prints the authentification information to the syslog.
Like this: Sep 18 12:11:22 mail deliver(user@domain.tld): auth input: user=user@domain.tld Sep 18 12:11:22 mail deliver(user@domain.tld): auth input: password=XXXX Sep 18 12:11:22 mail deliver(user@domain.tld): auth input: home=/home/mail/domain.tld/user Sep 18 12:11:22 mail deliver(user@domain.tld): auth input: uid=8 Sep 18 12:11:22 mail deliver(user@domain.tld): auth input: gid=8
I guess that it's only a configuration option but right now I can't figure out which one I need to change to turn this off.
First of all it shouldn't be sent to deliver in the first place. What userdb do you use and with what kind of a configuration? It shouldn't return password field.
Once you've got that fixed, you can unset auth_debug=yes.
Am Dienstag, 18. September 2007 15:52:57 schrieb Timo Sirainen:
On Tue, 2007-09-18 at 12:16 +0200, Dominik Schulz wrote:
Hi, I've got the problem that dovecot's deliver prints the authentification information to the syslog.
Like this: Sep 18 12:11:22 mail deliver(user@domain.tld): auth input: user=user@domain.tld Sep 18 12:11:22 mail deliver(user@domain.tld): auth input: password=XXXX Sep 18 12:11:22 mail deliver(user@domain.tld): auth input: home=/home/mail/domain.tld/user Sep 18 12:11:22 mail deliver(user@domain.tld): auth input: uid=8 Sep 18 12:11:22 mail deliver(user@domain.tld): auth input: gid=8
I guess that it's only a configuration option but right now I can't figure out which one I need to change to turn this off.
First of all it shouldn't be sent to deliver in the first place. What userdb do you use and with what kind of a configuration? It shouldn't return password field.
Once you've got that fixed, you can unset auth_debug=yes.
I'm using passdb sql and userdb prefetch/sql. auth_debug is set to no.
passdb sql { args = /etc/dovecot/dovecot-sql.conf }
userdb prefetch { } userdb sql { args = /etc/dovecot/dovecot-sql.conf }
Best Regards, Dominik
participants (3)
-
Dominik Schulz
-
Marcus Rueckert
-
Timo Sirainen