Re: rlm_unix and logging of bad passwords

Hi,

figure what could be done to prevent the line from being logged:

//line371ff if (fr_crypt_check((char *) request->password->vp_strvalue, (char *) vp->vp_strvalue) != 0) { radlog_request(L_AUTH, 0, request, "invalid password \"%s\"", request->password->vp_strvalue); return RLM_MODULE_REJECT; }

as Phil says...or if you really must, change that to.. if (fr_crypt_check((char *) request->password->vp_strvalue, (char *) vp->vp_strvalue) != 0) { radlog_request(L_AUTH, 0, request, "invalid password \"PASSWORD\""); return RLM_MODULE_REJECT; } though this should only be logging invalid passwords anyway???... alan