Re: logging of wrong passwords or usernames

[email protected] Wed, 22 Mar 2006 09:17:41 -0500
Newsgroups gmane.comp.djb.checkpassword
Message-ID <[email protected]>
Quoting "Chand ." <[email protected]>:

> Dear all,
>            I have installed qmail pop3d as per instructions in 
> lifewithqmail. But when my users type incorrect password, it is not 
> showing up anything in the /var/log/maillog.

LWQ set up doesn't log to syslog which is implied with /var/log/maillog

>
>           How do I configure it so that when a user types wrong 
> password, it is then logged in /var/log/maillog ??

I don't know of a way to do this short of using some patches to 
checkpassword and qmail-popup (do they even exist?)
here is a few lines from www.qmail.org about adding logging of users 
who are able to authenticate, so you can see if someone is logging in 
anyway:

# Qmail-popup redirects stderr to stdout, thus making it impossible to 
write a wrapper around qmail-pop3d which writes to the logfile by 
writing to stderr. Being a little cleverer with the shell, you can also 
redirect FD 7 onto stdout like this:

/var/qmail/bin/qmail-pop3d-wrapper.sh /var/qmail/bin/qmail-pop3d 
Maildir 2>&1 7>&1

Once you've done that, qmail-pop3d-wrapper.sh can log to FD 7, like this:

#!/bin/sh
echo "qmail-pop3d: user $USER logged in from $TCPREMOTEIP:$TCPREMOTEPORT" >&7
$@


if this is unacceptable use a different pop3 deamon.


bdm