Hello,

Am I correct that the string in question should normally contain the SASL response? While the "Password:" is apparently some interactive prompt, indicating that something might be wrong with the connection or configuration?

Eugene

On 16.05.2023 17:06, Wietse Venema via Postfix-users wrote:
mailmary--- via Postfix-users:
In all honesty, the current situation of logging the base64 string 
"UGFzc3dvcmQ6" does not help us.

Maybe we could reconsider, and actually log the data (raw or base64-decoded)?
Absolutely not. As a matter of security principle, one does not
log the content of login failures unless absolutely necessary.

        Wietse
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to