passwords show up in log files with Winbindd

[Hans Rasmussen]

As far as I can see, I'm not starting winbind, smbd, or nmbd with a debug
setting in my startup script. This is the winbind part....

 echo -n "Starting WINBIND services: "
	daemon /usr/local/samba/sbin/winbindd
	RETVAL2=$?
	echo
	[ $RETVAL -eq 0 -a $RETVAL2 -eq 0 ] && touch /var/lock/subsys/smb || \
	   RETVAL=1
	return $RETVAL


 I also have no loglevel setting in my smb.conf.

Thanks

Hans
----- Original Message -----
From: "Andrew Bartlett" <abartlet at pcug.org.au>
To: "Hans Rasmussen" <SBSFOR+hans at sbsfor.com>
Cc: <samba at lists.samba.org>
Sent: January 5, 2002 9:53 PM
Subject: Re: passwords show up in log files with Winbindd


> Hans Rasmussen wrote:
> >
> > Hi All
> >
> > I'm thinking that this isn't good.  This is from the CVS Head from Dec
31,
> > so is this debug code??.  Even the root password can show up as Winbind
> > tries to authenticate a console session.  This is from my mail log, but
is
> > also shows in the auth.log.
> >
> > Jan  5 07:50:59 sbs pam_winbind[22489]: Verify user `domain+user' with
> > password `passwd'
> >
> > Any ideas.  Thanks, great work so far.
>
> It should only show up if 'debug' is set as a command line option, but I
> will look into #ifdef DEBUG_PASSWORDing it.
>
> Andrew Bartlett
>
> --
> Andrew Bartlett                                 abartlet at pcug.org.au
> Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
> Student Network Administrator, Hawker College   abartlet at hawkerc.net
> http://samba.org     http://build.samba.org     http://hawkerc.net
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>