auth_debug_passwords=yes: Log password for PAM lookups.

--HG--
branch : HEAD

diff --git a/src/auth/passdb-pam.c b/src/auth/passdb-pam.c
index 65dfcbd116adba81392f4916824bbd135e0c5056..ee05c053d2097a2d8c3907ef265ba6696d631359 100644 (file)
--- a/src/auth/passdb-pam.c
+++ b/src/auth/passdb-pam.c
@@ -178,12 +178,16 @@ static int try_pam_auth(struct auth_request *request, pam_handle_t *pamh,
                        /* log this as error, since it probably is */
                        str = t_strdup_printf("%s (%s missing?)", str, path);
                        auth_request_log_error(request, "pam", "%s", str);
-               } else {
-                       if (status == PAM_AUTH_ERR) {
-                               str = t_strconcat(str, " (password mismatch?)",
-                                                 NULL);
+               } else if (status == PAM_AUTH_ERR) {
+                       str = t_strconcat(str, " (password mismatch?)", NULL);
+                       if (request->auth->verbose_debug_passwords) {
+                               str = t_strconcat(str, " (given password: ",
+                                                 request->mech_password,
+                                                 ")", NULL);
                        }
                        auth_request_log_info(request, "pam", "%s", str);
+               } else {
+                       auth_request_log_info(request, "pam", "%s", str);
                }
                return status;
        }