summaryrefslogtreecommitdiff
path: root/docs/docbook/smbdotconf/security/passwdchatdebug.xml
blob: a5771b72d2848726efa030c5695e78e6cf694cc6 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
<samba:parameter xmlns:samba="http://samba.org/common">
		<term><anchor id="PASSWDCHATDEBUG"/>passwd chat debug (G)</term>
		<listitem><para>This boolean specifies if the passwd chat script 
		parameter is run in <emphasis>debug</emphasis> mode. In this mode the 
		strings passed to and received from the passwd chat are printed 
		in the <citerefentry><refentrytitle>smbd</refentrytitle>
		<manvolnum>8</manvolnum></citerefentry> log with a 
		<link linkend="DEBUGLEVEL"><parameter moreinfo="none">debug level</parameter></link> 
		of 100. This is a dangerous option as it will allow plaintext passwords 
		to be seen in the <command moreinfo="none">smbd</command> log. It is available to help 
		Samba admins debug their <parameter moreinfo="none">passwd chat</parameter> scripts 
		when calling the <parameter moreinfo="none">passwd program</parameter> and should 
 		be turned off after this has been done. This option has no effect if the 
                <link linkend="PAMPASSWORDCHANGE"><parameter moreinfo="none">pam password change</parameter></link>
                paramter is set. This parameter is off by default.</para>
  

 		<para>See also <link linkend="PASSWDCHAT"><parameter moreinfo="none">passwd chat</parameter>
 		</link>, <link linkend="PAMPASSWORDCHANGE"><parameter moreinfo="none">pam password change</parameter>
                </link>, <link linkend="PASSWDPROGRAM"><parameter moreinfo="none">passwd program</parameter>
  		</link>.</para>

		<para>Default: <command moreinfo="none">passwd chat debug = no</command></para>
		</listitem>
		</samba:parameter>