Print bad passwords feature request?

Ted Cabeen secabeen at pobox.com
Mon Jan 13 18:46:15 EST 2003


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Content-Type: text/plain; charset=us-ascii

Would it be possible to add an option that makes cyrus print bad passwords in 
the log file?  I know that there is a slight security issue with revealing 
the incorrect passwords that users attempt to use, but doing telephone Tech 
Support without it is difficult.

I have a patch that does this, but it doesn't make it into a settable option.

- -- 
Ted Cabeen           http://www.pobox.com/~secabeen            ted at impulse.net 
Check Website or Keyserver for PGP/GPG Key BA0349D2         secabeen at pobox.com
"I have taken all knowledge to be my province." -F. Bacon  secabeen at cabeen.org
"Human kind cannot bear very much reality."-T.S.Eliot        cabeen at netcom.com


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (FreeBSD)
Comment: Exmh version 2.5 07/13/2001

iD8DBQE+I0/HoayJfLoDSdIRAkvtAKCA8Zsmz/8xJA1+aEZ7PccuZZWPuACbBZb4
qTffjB8XtiltvltGAUbB5/8=
=cKUm
-----END PGP SIGNATURE-----





More information about the Info-cyrus mailing list