[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: PPPproblem



> Michel Beland wrote:
> > 
> > > word         \qabcdefg\q
> > 
> > This is very bad !  With the \q at the end, the password is shown in
> > files /var/log/ppp.log and /var/log/messages, which are readable by
> > everyone by default.  You should only specify \qabcdefg so that the
> > password is replaced by a string of question marks in log files.
> 
> I am not familiar with the qabcdefg technique you are discussing.
> 
> In order to avoid having my password visible to the world, I break
> up my script into two files.

[ ... ]

> "" ATDT9342100 CONNECT "" ogin:-BREAK-ogin: <my login id> ssword: <my
> password>                                                 ^^^^^^^^^^^

Well, this means that you will get the full password inside
/var/log/ppp.log and /var/log/messages (or whatever file that receives
the output from syslogd).  Look up these files and you will see.  The
cure is to write \q<my password>, which tells ppp (or chat) that the
following string should not appear in log files.  I do not know why
having another \q after the password makes it fail, but it does.

-- 
Michel Beland                 beland@CERCA.UMontreal.CA
professionnel de recherche    tel: (514)369-5223  fax: (514)369-3880
CERCA (CEntre de Recherche en Calcul Applique)
5160, boul. Decarie, bureau 400(423), Montreal (Quebec), Canada, H3X 2H9


Reply to: