dovecot-1.1: auth_debug_passwords=yes: Log password for PAM look...

[dovecot at dovecot.org]

details:   http://hg.dovecot.org/dovecot-1.1/rev/11112baa8592
changeset: 8151:11112baa8592
user:      Timo Sirainen <tss at iki.fi>
date:      Wed Feb 04 12:23:55 2009 -0500
description:
auth_debug_passwords=yes: Log password for PAM lookups.

diffstat:

1 file changed, 8 insertions(+), 4 deletions(-)
src/auth/passdb-pam.c |   12 ++++++++----

diffs (23 lines):

diff -r eb9c1c78e919 -r 11112baa8592 src/auth/passdb-pam.c
--- a/src/auth/passdb-pam.c	Tue Feb 03 18:44:31 2009 -0500
+++ b/src/auth/passdb-pam.c	Wed Feb 04 12:23:55 2009 -0500
@@ -175,11 +175,15 @@ static int try_pam_auth(struct auth_requ
 			/* log this as error, since it probably is */
 			str = t_strdup_printf("%s (%s missing?)", str, path);
 			auth_request_log_error(request, "pam", "%s", str);
+		} else if (status == PAM_AUTH_ERR) {
+			str = t_strconcat(str, " (password mismatch?)", NULL);
+			if (request->auth->verbose_debug_passwords) {
+				str = t_strconcat(str, " (given password: ",
+						  request->mech_password,
+						  ")", NULL);
+			}
+			auth_request_log_info(request, "pam", "%s", str);
 		} else {
-			if (status == PAM_AUTH_ERR) {
-				str = t_strconcat(str, " (password mismatch?)",
-						  NULL);
-			}
 			auth_request_log_info(request, "pam", "%s", str);
 		}
 		return status;