samba - Jan 2002 - passwords show up in log files with Winbindd

Hi All

I'm thinking that this isn't good.  This is from the CVS Head from Dec
31,
so is this debug code??.  Even the root password can show up as Winbind
tries to authenticate a console session.  This is from my mail log, but is
also shows in the auth.log.

Jan  5 07:50:59 sbs pam_winbind[22489]: Verify user `domain+user' with
password `passwd'

Any ideas.  Thanks, great work so far.

Hans

Hans Rasmussen wrote:
> 
> Hi All
> 
> I'm thinking that this isn't good.  This is from the CVS Head from
Dec 31,
> so is this debug code??.  Even the root password can show up as Winbind
> tries to authenticate a console session.  This is from my mail log, but is
> also shows in the auth.log.
> 
> Jan  5 07:50:59 sbs pam_winbind[22489]: Verify user `domain+user' with
> password `passwd'
> 
> Any ideas.  Thanks, great work so far.
It should only show up if 'debug' is set as a command line option, but I
will look into #ifdef DEBUG_PASSWORDing it.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet@pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet@samba.org
Student Network Administrator, Hawker College   abartlet@hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net