Prevent failed passwords from being echoed to server logs, for security.

diff --git a/src/backend/libpq/auth.c b/src/backend/libpq/auth.c
index 7c090b933297cad5daeb48a358da11bb9a462b6f..637e2a623ebe0d0c694ad10a72e04c7054c82ab0 100644 (file)
--- a/src/backend/libpq/auth.c
+++ b/src/backend/libpq/auth.c
@@ -8,7 +8,7 @@
  *
  *
  * IDENTIFICATION
- *       $Header: /cvsroot/pgsql/src/backend/libpq/auth.c,v 1.78 2002/03/05 06:52:05 momjian Exp $
+ *       $Header: /cvsroot/pgsql/src/backend/libpq/auth.c,v 1.79 2002/03/05 07:57:45 momjian Exp $
  *
  *-------------------------------------------------------------------------
  */
@@ -663,7 +663,9 @@ pam_passwd_conv_proc(int num_msg, const struct pam_message ** msg, struct pam_re
 
                initStringInfo(&buf);
                pq_getstr(&buf);
-               elog(DEBUG5, "received PAM packet with len=%d, pw=%s", len, buf.data);
+               
+               /* Do not echo failed password to logs, for security. */
+               elog(DEBUG5, "received PAM packet");
 
                if (strlen(buf.data) == 0)
                {