summaryrefslogtreecommitdiff
path: root/docs/smbdotconf/security/passwdchatdebug.xml
blob: 6211688eb795b8300a6d7f2287bf15037b463eb7 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
<samba:parameter name="passwd chat debug"
                 context="G"
                 advanced="1" developer="1"
				 type="boolean"
                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
<description>
    <para>This boolean specifies if the passwd chat script 
    parameter is run in <emphasis>debug</emphasis> mode. In this mode the 
    strings passed to and received from the passwd chat are printed 
    in the <citerefentry><refentrytitle>smbd</refentrytitle>
    <manvolnum>8</manvolnum></citerefentry> log with a 
    <link linkend="DEBUGLEVEL"><parameter moreinfo="none">debug level</parameter></link> 
    of 100. This is a dangerous option as it will allow plaintext passwords 
    to be seen in the <command moreinfo="none">smbd</command> log. It is available to help 
    Samba admins debug their <parameter moreinfo="none">passwd chat</parameter> scripts 
    when calling the <parameter moreinfo="none">passwd program</parameter> and should 
    be turned off after this has been done. This option has no effect if the 
    <link linkend="PAMPASSWORDCHANGE"><parameter moreinfo="none">pam password change</parameter></link>
	paramter is set. This parameter is off by default.</para>
</description>

<related>passwd chat</related>
<related>pam password change</related>
<related>passwd program</related>

<value type="default">no</value>
</samba:parameter>