* pam_fshadow/pam_fshadow.c, pam_sql/pam_mysql.c,

pam_sql/pam_sql.c, pam_regex/pam_regex.c: Ensure passwords might
get divulged only at debugging level 100.


git-svn-id: file:///svnroot/pam-modules/trunk@87 56984be4-0537-0410-a56c-fcb268c96130
This commit is contained in:
Sergey Poznyakoff 2008-03-16 22:12:43 +00:00
parent f5f42d1c7b
commit d3b8bcfd1f
5 changed files with 29 additions and 18 deletions

View file

@ -294,6 +294,7 @@ verify_user_pass(pam_handle_t *pamh, const char *password, const char *query)
return PAM_SERVICE_ERR;
}
DEBUG(10,("Executing %s", query));
if (mysql_query(&mysql, query)) {
_pam_log(LOG_ERR, "MySQL: %s", mysql_error(&mysql));
mysql_close(&mysql);
@ -358,6 +359,7 @@ sql_acct(pam_handle_t *pamh, const char *query)
return PAM_SERVICE_ERR;
}
DEBUG(10,("Executing %s", query));
if (mysql_query(&mysql, query)) {
_pam_log(LOG_ERR, "MySQL: %s", mysql_error(&mysql));
mysql_close(&mysql);
@ -372,7 +374,7 @@ sql_acct(pam_handle_t *pamh, const char *query)
} else {
size_t n = mysql_num_rows(result);
mysql_free_result(result);
DEBUG(10, ("query affected %lu tuples", n));
_pam_debug("query affected %lu tuples", n);
}
}
mysql_close(&mysql);