On Fri, 21 Jul 2017 10:06:54 -0400 (EDT)
wie...@porcupine.org (Wietse Venema) wrote:

> > 20170617
> > 
> > Cleanup: the postconf command warns about unknown parameter
> > names in a database configuration file, specified as an
> > absolute pathname (for example, ldap:/path/to/file). This
> > code was mostly written in January 2017, and it still is a
> > partial implementation.  Files: postconf/postconf_dbms.c,
> > postconf/Makefile.in, postconf/test66.ref.  
> 
> Looks like a ton of parameters were added since I wrote this code.

Also mysql tables suffers from same issue. At lest following config
options are logged:

/usr/sbin/postconf: warning: mysql:/etc/postfix/virtual.cf: unused
parameter: password=xxxxxxxxxxx
/usr/sbin/postconf: warning: mysql:/etc/postfix/virtual.cf: unused
parameter: dbname=sqldbname
/usr/sbin/postconf: warning: mysql:/etc/postfix/virtual.cf: unused
parameter: tls_CApath=/etc/pki/tls/certs/cacert-name.crt
/usr/sbin/postconf: warning: mysql:/etc/postfix/virtual.cf: unused
parameter: query=SELECT goto FROM alias WHERE address='%s' AND active =
'1'
/usr/sbin/postconf: warning: mysql:/etc/postfix/virtual.cf: unused
parameter: user=postfix_ro /usr/sbin/postconf: warning:
mysql:/etc/postfix/virtual.cf: unused parameter: hosts=localhost

Especially logging password to maillog is a really bad thing.

Version of postfix is 3.3.1. And I'm sure this affects postgresql and
other database types too.

-- 
Tuomo Soini <t...@foobar.fi>
Foobar Linux services
+358 40 5240030
Foobar Oy <https://foobar.fi/>

Reply via email to