Bug#590598: saslauthd - auth via ldap/sasl logs debug messages

[Bastian Blank]

On Wed, Jul 28, 2010 at 12:56:40AM -0500, Dan White wrote:
> On 27/07/10 21:59 +0200, Bastian Blank wrote:
> It's because of the 'auth,authpriv.*' line in rsyslogd.conf (it also exists
> the same way in the sysklogd package).

Yes, this is the correct default.

> The debug statements also happen when bypassing saslauthd:
> ldapwhoami -H ldap://192.0.2.1 -U jsmith -Y DIGEST-MD5
> or using imtest.

So libsasl reports debug messages to syslog.

> To drop the messages from syslog, replace that line with:
> auth,authpriv.info                     /var/log/auth.log
> or some other lower priority level.

No. The tools must not send debug messages without being asked to do
so. Why does libsasl use syslog for interactive usage anyway?

Bastian

-- 
Vulcans worship peace above all.
		-- McCoy, "Return to Tomorrow", stardate 4768.3