The checkpassword package and other packages offering the same interface

Chand . | 22 Mar 2006 07:11

logging of wrong passwords or usernames

Dear all,
            I have installed qmail pop3d as per instructions in 
lifewithqmail. But when my users type incorrect password, it is not showing 
up anything in the /var/log/maillog.

           How do I configure it so that when a user types wrong password, 
it is then logged in /var/log/maillog ??

Thanking you

_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today - it's FREE! 
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

headers

Charles Cazabon | 22 Mar 2006 15:22

Re: logging of wrong passwords or usernames

Chand . <monday11 <at> hotmail.com> wrote:
>
> I have installed qmail pop3d as per instructions in lifewithqmail. But when
> my users type incorrect password, it is not showing up anything in the
> /var/log/maillog.

Not surprising; qmail-pop3d does no logging at all.

> How do I configure it so that when a user types wrong password, it is then
> logged in /var/log/maillog ??

It's complex, but it can be done.  How to do so has been described numerous
times on the qmail mailing list (where this question probably belongs) --
please see the qmail list archives for details.

Charles
--

-- 
-----------------------------------------------------------------------
Charles Cazabon                         <password <at> discworld.dyndns.org>
GPL'ed software available at:               http://pyropus.ca/software/
-----------------------------------------------------------------------

headers

gauze | 22 Mar 2006 15:17

Re: logging of wrong passwords or usernames

Quoting "Chand ." <monday11 <at> hotmail.com>:

> Dear all,
>            I have installed qmail pop3d as per instructions in 
> lifewithqmail. But when my users type incorrect password, it is not 
> showing up anything in the /var/log/maillog.

LWQ set up doesn't log to syslog which is implied with /var/log/maillog

>
>           How do I configure it so that when a user types wrong 
> password, it is then logged in /var/log/maillog ??

I don't know of a way to do this short of using some patches to 
checkpassword and qmail-popup (do they even exist?)
here is a few lines from www.qmail.org about adding logging of users 
who are able to authenticate, so you can see if someone is logging in 
anyway:

# Qmail-popup redirects stderr to stdout, thus making it impossible to 
write a wrapper around qmail-pop3d which writes to the logfile by 
writing to stderr. Being a little cleverer with the shell, you can also 
redirect FD 7 onto stdout like this:

/var/qmail/bin/qmail-pop3d-wrapper.sh /var/qmail/bin/qmail-pop3d 
Maildir 2>&1 7>&1

Once you've done that, qmail-pop3d-wrapper.sh can log to FD 7, like this:

#!/bin/sh

(Continue reading)