Logging passwords in the news.log

[Forrest Aldrich]

Point being, I didn't turn tracing on to begin with... so this is curious.

I'll look into it, thanks.




Russ Allbery wrote:

>Forrest Aldrich <forrie at forrie.com> writes:
>
>  
>
>>I've had the news server running for a few days - suddenly today, it's
>>recording authinfo in the news.log, and I didn't configure it to do
>>this:
>>    
>>
>
>  
>
>>Sep 15 11:15:31 duinn nnrpd[70752]: forrie.ne.client2.attbi.com < 
>>AUTHINFO user forrie
>>Sep 15 11:15:31 duinn nnrpd[70752]: forrie.ne.client2.attbi.com > 381 
>>PASS required
>>Sep 15 11:15:34 duinn nnrpd[70752]: forrie.ne.client2.attbi.com < 
>>AUTHINFO pass myrealpassword
>>    
>>
>
>  
>
>>How did this happen, and how can I disable this behavior.
>>    
>>
>
>You have tracing turned on.  You want to turn that off; it logs all
>network traffic to the server for debugging.  See the documentation for
>ctlinnd trace.
>
>  
>