[ldapvi] Clear password shown in audit logs when using ldapvi

Matěj Cepl mcepl at cepl.eu
Fri Jan 5 00:23:10 CET 2018


On Fri, 2017-12-08 at 22:58 +0000, Michael wrote:
> We when using pam_audit_tty in Red Hat we are noticing that the
> passwords are being captured when using the ldapvi binary only.

If I just stop switching off ICANON (which really doesn't seem to
make sense), I get https://koji.fedoraproject.org/koji/taskinfo?t
askID=24001635 Does this help your situation? Does the program
work?

Best,

Matěj


-- 
http://matej.ceplovi.cz/blog/, Jabber: mcepl<at>ceplovi.cz
GPG Finger: 3C76 A027 CA45 AD70 98B5  BC1D 7920 5802 880B C9D8
 
Those to whom evil is done \\ Do evil in return.
    -- W. H. Auden, September 1, 1939
       http://www.poets.org/viewmedia.php/prmMID/15545
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part
URL: <http://lists.askja.de/pipermail/ldapvi/attachments/20180105/886716f3/attachment.sig>


More information about the ldapvi mailing list