Logging passwords in the news.log

[Forrest Aldrich]

I've had the news server running for a few days - suddenly today, it's 
recording authinfo in the news.log, and I didn't configure it to do this:

Sep 15 11:15:31 duinn nnrpd[70752]: forrie.ne.client2.attbi.com < 
AUTHINFO user forrie
Sep 15 11:15:31 duinn nnrpd[70752]: forrie.ne.client2.attbi.com > 381 
PASS required
Sep 15 11:15:34 duinn nnrpd[70752]: forrie.ne.client2.attbi.com < 
AUTHINFO pass myrealpassword

How did this happen, and how can I disable this behavior.


_F