void auth_request_log_password_mismatch(struct auth_request *request,
const char *subsystem)
{
- auth_request_log_login_failure(request, subsystem, "Password mismatch");
+ auth_request_log_login_failure(request, subsystem, AUTH_LOG_MSG_PASSWORD_MISMATCH);
}
void auth_request_log_unknown_user(struct auth_request *request,
#include "userdb.h"
#include "passdb.h"
#include "auth-request-var-expand.h"
+#include "password-scheme.h"
#define AUTH_REQUEST_USER_KEY_IGNORE " "
if (!mem_equals_timing_safe(response_hex, request->response, sizeof(digest)*2)) {
auth_request_log_info(&request->auth_request, AUTH_SUBSYS_MECH,
- "password mismatch");
+ AUTH_LOG_MSG_PASSWORD_MISMATCH);
return FALSE;
}
if (!mem_equals_timing_safe(response_hex, request->response, 32)) {
auth_request_log_info(&request->auth_request,
AUTH_SUBSYS_MECH,
- "password mismatch");
+ AUTH_LOG_MSG_PASSWORD_MISMATCH);
return FALSE;
}
} else {
&error)) {
if (!verify_credentials(request)) {
auth_request_log_info(auth_request, AUTH_SUBSYS_MECH,
- "password mismatch");
+ AUTH_LOG_MSG_PASSWORD_MISMATCH);
} else {
server_final_message =
get_scram_server_final(request);
else if (ret == LDAP_INVALID_CREDENTIALS) {
auth_request_log_login_failure(auth_request,
AUTH_SUBSYS_DB,
- "Password mismatch (for LDAP bind)");
+ "AUTH_LOG_MSG_PASSWORD_MISMATCH (for LDAP bind)");
passdb_result = PASSDB_RESULT_PASSWORD_MISMATCH;
} else if (ret == LDAP_NO_SUCH_OBJECT) {
passdb_result = PASSDB_RESULT_USER_UNKNOWN;
str = t_strdup_printf("%s (%s missing?)", str, path);
auth_request_log_error(request, AUTH_SUBSYS_DB, "%s", str);
} else if (status == PAM_AUTH_ERR) {
- str = t_strconcat(str, " (password mismatch?)", NULL);
+ str = t_strconcat(str, " ("AUTH_LOG_MSG_PASSWORD_MISMATCH"?)", NULL);
if (request->set->debug_passwords) {
str = t_strconcat(str, " (given password: ",
request->mech_password,
}
if (ret == 0)
- *error_r = "Password mismatch";
+ *error_r = AUTH_LOG_MSG_PASSWORD_MISMATCH;
return ret;
}
#ifndef PASSWORD_SCHEME_H
#define PASSWORD_SCHEME_H
+#define AUTH_LOG_MSG_PASSWORD_MISMATCH "Password mismatch"
+
enum password_encoding {
PW_ENCODING_NONE,
PW_ENCODING_BASE64,