clear text password in ejabberd debug log

I use:

{auth_method, ldap}.
{loglevel, 5}.

authentication encrypt ok, but, why show plain text password in log file?

you are enable Debug loglevel

you are enable Debug loglevel - ejabberd show all info.

P.S. many progs show user passwords in log files - ppp, postfix, etc. All logs - contain very sensitive data.

Syndicate content