dovecot - Sep 2007 - Deliver prints passwort to the syslog

Hi,
I've got the problem that dovecot's deliver prints the authentification 
information to the syslog.

Like this:
Sep 18 12:11:22 mail deliver(user at domain.tld): auth input: 
user=user at domain.tld
Sep 18 12:11:22 mail deliver(user at domain.tld): auth input: password=XXXX
Sep 18 12:11:22 mail deliver(user at domain.tld): auth input: 
home=/home/mail/domain.tld/user
Sep 18 12:11:22 mail deliver(user at domain.tld): auth input: uid=8
Sep 18 12:11:22 mail deliver(user at domain.tld): auth input: gid=8

I guess that it's only a configuration option but right now I can't
figure out
which one I need to change to turn this off.

Any help would be appreciated. Thanks in advance.

Best Regards
Dominik

On 2007-09-18 12:16:00 +0200, Dominik Schulz wrote:
> I've got the problem that dovecot's deliver prints the
authentification
> information to the syslog.
> 
> Like this:
> Sep 18 12:11:22 mail deliver(user at domain.tld): auth input: 
> user=user at domain.tld
> Sep 18 12:11:22 mail deliver(user at domain.tld): auth input: password=XXXX
> Sep 18 12:11:22 mail deliver(user at domain.tld): auth input: 
> home=/home/mail/domain.tld/user
> Sep 18 12:11:22 mail deliver(user at domain.tld): auth input: uid=8
> Sep 18 12:11:22 mail deliver(user at domain.tld): auth input: gid=8
> 
> I guess that it's only a configuration option but right now I can't
figure out
> which one I need to change to turn this off.
> 
> Any help would be appreciated. Thanks in advance.
grep auth /path/to/dovecot.conf

    darix

-- 
           openSUSE - SUSE Linux is my linux
               openSUSE is good for you
                   www.opensuse.org

On Tue, 2007-09-18 at 12:16 +0200, Dominik Schulz wrote:
> Hi,
> I've got the problem that dovecot's deliver prints the
authentification
> information to the syslog.
> 
> Like this:
> Sep 18 12:11:22 mail deliver(user at domain.tld): auth input: 
> user=user at domain.tld
> Sep 18 12:11:22 mail deliver(user at domain.tld): auth input: password=XXXX
> Sep 18 12:11:22 mail deliver(user at domain.tld): auth input: 
> home=/home/mail/domain.tld/user
> Sep 18 12:11:22 mail deliver(user at domain.tld): auth input: uid=8
> Sep 18 12:11:22 mail deliver(user at domain.tld): auth input: gid=8
> 
> I guess that it's only a configuration option but right now I can't
figure out
> which one I need to change to turn this off.
First of all it shouldn't be sent to deliver in the first place. What
userdb do you use and with what kind of a configuration? It shouldn't
return password field.

Once you've got that fixed, you can unset auth_debug=yes.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL:
<http://dovecot.org/pipermail/dovecot/attachments/20070918/2349927b/attachment-0002.bin>

Am Dienstag, 18. September 2007 15:52:57 schrieb Timo
Sirainen:
> On Tue, 2007-09-18 at 12:16 +0200, Dominik Schulz wrote:
> > Hi,
> > I've got the problem that dovecot's deliver prints the
authentification
> > information to the syslog.
> >
> > Like this:
> > Sep 18 12:11:22 mail deliver(user at domain.tld): auth input:
> > user=user at domain.tld
> > Sep 18 12:11:22 mail deliver(user at domain.tld): auth input:
password=XXXX
> > Sep 18 12:11:22 mail deliver(user at domain.tld): auth input:
> > home=/home/mail/domain.tld/user
> > Sep 18 12:11:22 mail deliver(user at domain.tld): auth input: uid=8
> > Sep 18 12:11:22 mail deliver(user at domain.tld): auth input: gid=8
> >
> > I guess that it's only a configuration option but right now I
can't
> > figure out which one I need to change to turn this off.
>
> First of all it shouldn't be sent to deliver in the first place. What
> userdb do you use and with what kind of a configuration? It shouldn't
> return password field.
>
> Once you've got that fixed, you can unset auth_debug=yes.
I'm using passdb sql and userdb prefetch/sql. auth_debug is set to no.

---
passdb sql {
    args = /etc/dovecot/dovecot-sql.conf
  }

  userdb prefetch {
  }
  userdb sql {
    args = /etc/dovecot/dovecot-sql.conf
  }
---

Best Regards,
Dominik