[Dovecot] auth_debug_passwords

Timo Sirainen tss at iki.fi
Wed Feb 4 19:31:45 EET 2009


On Wed, 2009-02-04 at 08:52 -0200, Eduardo M KALINOWSKI wrote:
> Josh Gentry wrote:
> > Hi.  I'm new to Dovecot and about to start using it in production.  In
> > the config file, I set the option, auth_debug_passwords, to yes.  I do
> > not see any failed passwords logged, however.  It did cause more verbose
> > authentication logging, but failed passwords are still hidden.
> >   
> 
> That option is not for logging passwords, but to ease problem
> investigation in case something is not working as it should.

Well, yes, but it's about investigating why logins are failing due to
password mismatches, so logging the password in that case is useful. It
was already done with pretty much all passdbs except PAM.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part
Url : http://dovecot.org/pipermail/dovecot/attachments/20090204/32b3b9a9/attachment.bin 


More information about the dovecot mailing list