[Bug 2583] rsync fails with "authentication failure"

Vidar Madsen vidarino at gmail.com
Sat Apr 9 21:42:19 GMT 2005


Quoting the comment from the bugtracker;

> ------- Additional Comments From wayned at samba.org  2005-04-09 11:19 -------
> Serendipitously, you'll be glad to know that I just finished checking in some
> changes to the authorization code that makes it log the reason for why the
> authorization failed (e.g. unauthorized user, missing secret for user, password
> mismatch).

Is that really a good idea? At least, please make that optional, as
I'm not too keen on revealing to a potential attacker if certain
usernames are valid or not. (Or will this be logged on the server side
only? If so, I'm all for it. :)

Vidar


More information about the rsync mailing list