Logging passwords in the news.log

[Forrest Aldrich]

It's happening again.

I'm running 2 NNRPD's  - one standard and one SSL.   Nowhere have I 
specified trace or debug.   Nobody else has access to this machine, so 
it's not a matter of multiple people crossing wires.

How can I disable this, it's becoming annoying.


Thanks.


Forrest Aldrich wrote:

>Point being, I didn't turn tracing on to begin with... so this is curious.
>
>I'll look into it, thanks.
>
>
>
>
>Russ Allbery wrote:
>
>  
>
>>Forrest Aldrich <forrie at forrie.com> writes:
>>
>> 
>>
>>    
>>
>>>I've had the news server running for a few days - suddenly today, it's
>>>recording authinfo in the news.log, and I didn't configure it to do
>>>this:
>>>   
>>>
>>>      
>>>
>> 
>>
>>    
>>
>>>Sep 15 11:15:31 duinn nnrpd[70752]: forrie.ne.client2.attbi.com < 
>>>AUTHINFO user forrie
>>>Sep 15 11:15:31 duinn nnrpd[70752]: forrie.ne.client2.attbi.com > 381 
>>>PASS required
>>>Sep 15 11:15:34 duinn nnrpd[70752]: forrie.ne.client2.attbi.com < 
>>>AUTHINFO pass myrealpassword
>>>   
>>>
>>>      
>>>
>> 
>>
>>    
>>
>>>How did this happen, and how can I disable this behavior.
>>>   
>>>
>>>      
>>>
>>You have tracing turned on.  You want to turn that off; it logs all
>>network traffic to the server for debugging.  See the documentation for
>>ctlinnd trace.
>>
>> 
>>
>>    
>>
>
>  
>