浏览代码

[Dovecot] Remove logging of invalid sasl sessions

andryyy 4 年之前
父节点
当前提交
13223245f2
共有 1 个文件被更改,包括 4 次插入7 次删除
  1. 4 7
      data/Dockerfiles/dovecot/docker-entrypoint.sh

+ 4 - 7
data/Dockerfiles/dovecot/docker-entrypoint.sh

@@ -156,8 +156,8 @@ function auth_password_verify(req, pass)
   while row do
     if req.password_verify(req, row.password, pass) == 1 then
       cur:close()
-      con:execute(string.format([[INSERT INTO sasl_logs (success, service, app_password, username, real_rip)
-        VALUES (1, "%s", 0, "%s", "%s")]], con:escape(req.service), con:escape(req.user), con:escape(req.real_rip)))
+      con:execute(string.format([[INSERT INTO sasl_logs (service, app_password, username, real_rip)
+        VALUES ("%s", 0, "%s", "%s")]], con:escape(req.service), con:escape(req.user), con:escape(req.real_rip)))
       return dovecot.auth.PASSDB_RESULT_OK, "password=" .. pass
     end
     row = cur:fetch (row, "a")
@@ -176,16 +176,13 @@ function auth_password_verify(req, pass)
   while row do
     if req.password_verify(req, row.password, pass) == 1 then
       cur:close()
-      con:execute(string.format([[INSERT INTO sasl_logs (success, service, app_password, username, real_rip)
-        VALUES (1, "%s", %d, "%s", "%s")]], con:escape(req.service), row.id, con:escape(req.user), con:escape(req.real_rip)))
+      con:execute(string.format([[INSERT INTO sasl_logs (service, app_password, username, real_rip)
+        VALUES ("%s", %d, "%s", "%s")]], con:escape(req.service), row.id, con:escape(req.user), con:escape(req.real_rip)))
       return dovecot.auth.PASSDB_RESULT_OK, "password=" .. pass
     end
     row = cur:fetch (row, "a")
   end
 
-  con:execute(string.format([[INSERT INTO sasl_logs (success, service, app_password, username, real_rip)
-    VALUES (0, "%s", 0, "%s", "%s")]], con:escape(req.service), con:escape(req.user), con:escape(req.real_rip)))
-
   return dovecot.auth.PASSDB_RESULT_PASSWORD_MISMATCH, "Failed to authenticate"
 
   -- PoC