diff --git a/ucs-4.0-1/management/univention-join/univention-join b/ucs-4.0-1/management/univention-join/univention-join
index 9a6e5cb..cb3ba6c 100755
--- a/ucs-4.0-1/management/univention-join/univention-join
+++ b/ucs-4.0-1/management/univention-join/univention-join
@@ -527,7 +527,7 @@ args+=(-role "$server_role" -hostname "$hostname" -domainname "$domainname")
 # Copy local $DCPWD to remote $DCPWD' and invoke univention-join remotely
 univention-ssh --no-split "$DCPWD" "${DCACCOUNT}@${DCNAME}" \
 	'DCPWD=$(mktemp) && trap "rm -f \"$DCPWD\"" EXIT && cat >"$DCPWD" && /usr/share/univention-join/univention-server-join -bindpwfile "$DCPWD"' \
-	"$(bashquote "${args[@]}")" <"$DCPWD" 2>&1 | tee "$USERTMP/log" >>/var/log/univention/join.log
+	"$(bashquote "${args[@]}")" <"$DCPWD" 2>&1 | tee "$USERTMP/log"  | sed -u -e 's/KerberosPasswd="[^"]*"//' >>/var/log/univention/join.log
 res_message="$(sed -n '/^E:/ { s/^E:\s*// p }' "$USERTMP/log")"
 if [ -z "$res_message" ]; then
 	echo -e "\033[60Gdone"