changeset 8709:323c8eff78d4 HEAD

auth_debug_passwords=yes: Log password for PAM lookups.
author Timo Sirainen <tss@iki.fi>
date Wed, 04 Feb 2009 12:23:55 -0500
parents 7c4f4a1b1313
children eaf8c93be56e
files src/auth/passdb-pam.c
diffstat 1 files changed, 8 insertions(+), 4 deletions(-) [+]
line wrap: on
line diff
--- a/src/auth/passdb-pam.c	Tue Feb 03 12:07:21 2009 -0500
+++ b/src/auth/passdb-pam.c	Wed Feb 04 12:23:55 2009 -0500
@@ -178,11 +178,15 @@
 			/* log this as error, since it probably is */
 			str = t_strdup_printf("%s (%s missing?)", str, path);
 			auth_request_log_error(request, "pam", "%s", str);
+		} else if (status == PAM_AUTH_ERR) {
+			str = t_strconcat(str, " (password mismatch?)", NULL);
+			if (request->auth->verbose_debug_passwords) {
+				str = t_strconcat(str, " (given password: ",
+						  request->mech_password,
+						  ")", NULL);
+			}
+			auth_request_log_info(request, "pam", "%s", str);
 		} else {
-			if (status == PAM_AUTH_ERR) {
-				str = t_strconcat(str, " (password mismatch?)",
-						  NULL);
-			}
 			auth_request_log_info(request, "pam", "%s", str);
 		}
 		return status;