suppress more secrets

diff --git a/src/modules/rlm_perl/rlm_perl.c b/src/modules/rlm_perl/rlm_perl.c
index ee13b671e13e512fdf3bf0791a68c8ef6aae85a1..d21db41432050f30881fb1a6e37e1ce2df40963f 100644 (file)
--- a/src/modules/rlm_perl/rlm_perl.c
+++ b/src/modules/rlm_perl/rlm_perl.c
@@ -765,7 +765,7 @@ static void perl_store_vps(UNUSED TALLOC_CTX *ctx, REQUEST *request, VALUE_PAIR
 static void pairadd_sv(TALLOC_CTX *ctx, REQUEST *request, VALUE_PAIR **vps, char *key, SV *sv, FR_TOKEN op,
                      const char *hash_name, const char *list_name)
 {
-       char            *val = NULL;
+       char const      *val = NULL;
        VALUE_PAIR      *vp;
        STRLEN len;
 
@@ -796,6 +796,10 @@ static void pairadd_sv(TALLOC_CTX *ctx, REQUEST *request, VALUE_PAIR **vps, char
                if (fr_pair_value_from_str(vp, val, len) < 0) goto fail;
        }
 
+       if (vp->da->flags.secret && request->root->suppress_secrets && (rad_debug_lvl < 3)) {
+               val = "<<< secret >>>";
+       }
+
        RDEBUG("&%s:%s %s $%s{'%s'} -> '%s'", list_name, key, fr_int2str(fr_tokens, op, "<INVALID>"),
               hash_name, key, val);
 }