Date: Sun, 7 Nov 1999 14:25:22 +0100 From: Eivind Eklund <eivind@FreeBSD.org> To: "Daniel C. Sobral" <dcs@newsguy.com> Cc: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/libexec/uucpd uucpd.c Message-ID: <19991107142522.L72085@bitbox.follo.net> In-Reply-To: <382573E1.66E8AF35@newsguy.com>; from dcs@newsguy.com on Sun, Nov 07, 1999 at 09:43:13PM %2B0900 References: <199911062058.MAA72645@freefall.freebsd.org> <382573E1.66E8AF35@newsguy.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, Nov 07, 1999 at 09:43:13PM +0900, Daniel C. Sobral wrote: > Eivind Eklund wrote: > > > > eivind 1999/11/06 12:58:45 PST > > > > Modified files: > > libexec/uucpd uucpd.c > > Log: > > Log username with password failure. > > This has proved useful in real life installations. > > Just for the record, this is considered a really bad thing, because > one common error is typing the password when the username is being > expected. > > Of course, in an automated environment without user intervention, > that's probably not relevant. But I'd rather just remark on it > anyway. :-) I wouldn't expect anybody to do UUCP manually. The servers I originally did this change for has about a thousand customers using UUCP-over-TCP, using various systems. I've not seen any passwords end up in the log; however, it has made it possible to contact users with problems, and to see why we continiously got logged password failures (answer: Some broken client sending 'quit' on the username prompt before disconnecting). I don't have any religious feeling about this change, and I'm willing to back it out and keep it as a local change again (the way it has been for a year or so). I just thought it would be considered an improvement for other users, too. Eivind. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19991107142522.L72085>