From owner-cvs-all  Sun Nov  7  5:25:29 1999
Delivered-To: cvs-all@freebsd.org
Received: from ns1.yes.no (ns1.yes.no [195.204.136.10])
	by hub.freebsd.org (Postfix) with ESMTP
	id 9F66914F76; Sun,  7 Nov 1999 05:25:24 -0800 (PST)
	(envelope-from eivind@bitbox.follo.net)
Received: from bitbox.follo.net (bitbox.follo.net [195.204.143.218])
	by ns1.yes.no (8.9.3/8.9.3) with ESMTP id OAA24973;
	Sun, 7 Nov 1999 14:25:22 +0100 (CET)
Received: (from eivind@localhost)
	by bitbox.follo.net (8.8.8/8.8.6) id OAA16580;
	Sun, 7 Nov 1999 14:25:22 +0100 (MET)
Date: Sun, 7 Nov 1999 14:25:22 +0100
From: Eivind Eklund <eivind@FreeBSD.org>
To: "Daniel C. Sobral" <dcs@newsguy.com>
Cc: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject: Re: cvs commit: src/libexec/uucpd uucpd.c
Message-ID: <19991107142522.L72085@bitbox.follo.net>
References: <199911062058.MAA72645@freefall.freebsd.org> <382573E1.66E8AF35@newsguy.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Mutt 1.0i
In-Reply-To: <382573E1.66E8AF35@newsguy.com>; from dcs@newsguy.com on Sun, Nov 07, 1999 at 09:43:13PM +0900
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk

On Sun, Nov 07, 1999 at 09:43:13PM +0900, Daniel C. Sobral wrote:
> Eivind Eklund wrote:
> > 
> > eivind      1999/11/06 12:58:45 PST
> > 
> >   Modified files:
> >     libexec/uucpd        uucpd.c
> >   Log:
> >   Log username with password failure.
> >   This has proved useful in real life installations.
> 
> Just for the record, this is considered a really bad thing, because
> one common error is typing the password when the username is being
> expected.
> 
> Of course, in an automated environment without user intervention,
> that's probably not relevant. But I'd rather just remark on it
> anyway. :-)

I wouldn't expect anybody to do UUCP manually.

The servers I originally did this change for has about a thousand
customers using UUCP-over-TCP, using various systems.  I've not seen
any passwords end up in the log; however, it has made it possible to
contact users with problems, and to see why we continiously got logged
password failures (answer: Some broken client sending 'quit' on the
username prompt before disconnecting).

I don't have any religious feeling about this change, and I'm willing
to back it out and keep it as a local change again (the way it has
been for a year or so).  I just thought it would be considered an
improvement for other users, too.

Eivind.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message