summaryrefslogtreecommitdiff
path: root/docs/docbook/smbdotconf/security/passwdchatdebug.xml
blob: 2d731b5d119dbf3b2303c59337188104d4b6dbb0 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
<samba:parameter name="passwd chat debug"
                 context="G"
                 advanced="1" developer="1"
                 xmlns:samba="http://samba.org/common">
<listitem>
    <para>This boolean specifies if the passwd chat script 
    parameter is run in <emphasis>debug</emphasis> mode. In this mode the 
    strings passed to and received from the passwd chat are printed 
    in the <citerefentry><refentrytitle>smbd</refentrytitle>
    <manvolnum>8</manvolnum></citerefentry> log with a 
    <link linkend="DEBUGLEVEL"><parameter moreinfo="none">debug level</parameter></link> 
    of 100. This is a dangerous option as it will allow plaintext passwords 
    to be seen in the <command moreinfo="none">smbd</command> log. It is available to help 
    Samba admins debug their <parameter moreinfo="none">passwd chat</parameter> scripts 
    when calling the <parameter moreinfo="none">passwd program</parameter> and should 
    be turned off after this has been done. This option has no effect if the 
    <link linkend="PAMPASSWORDCHANGE"><parameter moreinfo="none">pam password change</parameter></link>
    paramter is set. This parameter is off by default.</para>
  
    <para>See also <link linkend="PASSWDCHAT"><parameter moreinfo="none">passwd chat</parameter>
    </link>, <link linkend="PAMPASSWORDCHANGE"><parameter moreinfo="none">pam password change</parameter>
    </link>, <link linkend="PASSWDPROGRAM"><parameter moreinfo="none">passwd program</parameter>
    </link>.</para>

    <para>Default: <command moreinfo="none">passwd chat debug = no</command></para>
</listitem>
</samba:parameter>