aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorBruce Momjian <bruce@momjian.us>2002-03-05 07:57:45 +0000
committerBruce Momjian <bruce@momjian.us>2002-03-05 07:57:45 +0000
commitaf41101a40af4c067b0f32ee2d64d976389caf26 (patch)
tree7d476788e420725c4217f0f267117f8ef88b6159
parent16d6615b4169f210b6e6bcead6fbf5b67e5c66f8 (diff)
downloadpostgresql-af41101a40af4c067b0f32ee2d64d976389caf26.tar.gz
postgresql-af41101a40af4c067b0f32ee2d64d976389caf26.zip
Prevent failed passwords from being echoed to server logs, for security.
-rw-r--r--src/backend/libpq/auth.c6
1 files changed, 4 insertions, 2 deletions
diff --git a/src/backend/libpq/auth.c b/src/backend/libpq/auth.c
index 7c090b93329..637e2a623eb 100644
--- a/src/backend/libpq/auth.c
+++ b/src/backend/libpq/auth.c
@@ -8,7 +8,7 @@
*
*
* IDENTIFICATION
- * $Header: /cvsroot/pgsql/src/backend/libpq/auth.c,v 1.78 2002/03/05 06:52:05 momjian Exp $
+ * $Header: /cvsroot/pgsql/src/backend/libpq/auth.c,v 1.79 2002/03/05 07:57:45 momjian Exp $
*
*-------------------------------------------------------------------------
*/
@@ -663,7 +663,9 @@ pam_passwd_conv_proc(int num_msg, const struct pam_message ** msg, struct pam_re
initStringInfo(&buf);
pq_getstr(&buf);
- elog(DEBUG5, "received PAM packet with len=%d, pw=%s", len, buf.data);
+
+ /* Do not echo failed password to logs, for security. */
+ elog(DEBUG5, "received PAM packet");
if (strlen(buf.data) == 0)
{