From: Matthew Wild <mwild1@gmail.com>
Date: Sat, 13 Feb 2010 19:35:12 +0000 (+0000)
Subject: mod_saslauth: Don't print raw SASL data to avoid logging passwords unnecessarily
X-Git-Url: https://git.enpas.org/?a=commitdiff_plain;ds=inline;h=c4ee4739ec760b3d212b018c6b3b9669812f57a7;p=prosody.git

mod_saslauth: Don't print raw SASL data to avoid logging passwords unnecessarily
---

diff --git a/plugins/mod_saslauth.lua b/plugins/mod_saslauth.lua
index beb59dd2..be324b24 100644
--- a/plugins/mod_saslauth.lua
+++ b/plugins/mod_saslauth.lua
@@ -69,13 +69,13 @@ local anonymous_authentication_profile = {
 local function build_reply(status, ret, err_msg)
 	local reply = st.stanza(status, {xmlns = xmlns_sasl});
 	if status == "challenge" then
-		log("debug", "%s", ret or "");
+		--log("debug", "CHALLENGE: %s", ret or "");
 		reply:text(base64.encode(ret or ""));
 	elseif status == "failure" then
 		reply:tag(ret):up();
 		if err_msg then reply:tag("text"):text(err_msg); end
 	elseif status == "success" then
-		log("debug", "%s", ret or "");
+		--log("debug", "SUCCESS: %s", ret or "");
 		reply:text(base64.encode(ret or ""));
 	else
 		module:log("error", "Unknown sasl status: %s", status);
@@ -123,7 +123,7 @@ local function sasl_handler(session, stanza)
 	local text = stanza[1];
 	if text then
 		text = base64.decode(text);
-		log("debug", "%s", text:gsub("[%z\001-\008\011\012\014-\031]", " "));
+		--log("debug", "AUTH: %s", text:gsub("[%z\001-\008\011\012\014-\031]", " "));
 		if not text then
 			session.sasl_handler = nil;
 			session.send(build_reply("failure", "incorrect-encoding"));