Re: [SPAM] lastauth troubles, old version

On 04/11/2013 03:10 PM, Charles Sprickman wrote:
> On Apr 11, 2013, at 5:02 PM, Tom Collins wrote:
>
>> Charles,
>>
>> QmailAdmin will update lastauth (as least the file in the user's directory) as well.  I know that on my current system, pop3 and pop3s update the file (using qmail's POP server) but IMAP does not (using dovecot).
>
> Interesting.  Most of our users don't know about qmailadmin - they do password changes and spam settings inside our webmail.
>
> I also just tried logging into qmailadmin with a test account, and still no lastauth entry.
>
> Odd how random this seems.  I noticed that even the users that have ended up with lastauth entries are only getting some of their logins updated - for example, I might see someone with a lastauth timestamp of 4:30, but then see a dozen or more logins after that in the mail log.
>
> I've enabled more logging in authdaemond (which I assume through the vchkpw module is where the last auth logging should be taking place), but I don't see anything particularly odd:
>
> Apr 11 18:08:16 xena pop3d-ssl: Connection, ip=[x.x.x.x]
> Apr 11 18:08:16 xena authdaemond: received auth request, service=imap, authtype=login
> Apr 11 18:08:16 xena authdaemond: authvchkpw: trying this module
> Apr 11 18:08:16 xena authdaemond: authvchkpw: sysusername=<null>, sysuserid=90, sysgroupid=90, homedir=/home/vpopmail/domains/bway.net/2/xxxx, [email protected], fullname= 'xxxx', maildir=<null>, quota=<null>, options=disablewebmail=0,disablepop3=0,disableimap=0
> Apr 11 18:08:16 xena authdaemond: password matches successfully
>
> Not having much luck finding a vpopmail changelog that dates back to 5.4.7. :)
>
> Charles
>
>> -Tom
>>
>>
>> On Apr 11, 2013, at 1:47 PM, Charles Sprickman wrote:
>>
>>> It's been some time since I've had to dig into any vpopmail issues as we have a box that's been "frozen in time" for years.  It's quite the frankenbox at this point and I'll be having to get myself up to speed in the coming months to deal with a move to new hardware, moving to dovecot from courier, and fronting the whole qmail mess with postfix.
>>>
>>> So I decided to start small and verify I can still rebuild the current vpopmail version we run (5.4.7) in a VM and alter a few options.
>>>
>>> I opted to enable the "last login" function.  It was turned off long ago to alleviate some db load, but that's no longer an issue for us.  I've rebuilt 5.4.7 with "--enable-auth-logging" but I'm not seeing all logins show up in the "lastauth" table.  We use courier (4.0.6) and authdaemond (0.58) with vpopmail auth enabled.
>>>
>>> In my testing, I tried a pop3, pop3s, imap, and imaps login and found no errors logged and no logins show up in the lastauth table.  To complicate matters, I do see a handful of users showing up in the table, but I can't find any common criteria here - some of these users are pop, some are imap.
>>>
>>> I feel like I've probably forgotten some piece of this puzzle, any hints?  How can I debug why the logins are not being logged?
>>>
>>> Thanks,
>>>
>>> Charles
>>>
>>>
>>
>>
>>
>>
>
>
> 
>
>

Have you considered migrating to qmail-toaster? That should be a pretty 
straight forward migration (qmailtoaster-plus includes backup and 
restore scripts that are useful for migrating). There are a few vpopmail 
database changes between 5.4.7 and 5.4.33, but that shouldn't be very 
difficult do. The qtp-convert script handles the changes from 5.4.17 to 
5.4.33.

While dovecot will be replacing courier as the stock IMAP service in the 
near future, there are instructions on the wiki for doing this 
conversion: 
http://wiki.qmailtoaster.com/index.php/Replacing_Courier_IMAP_with_Dovecot_IMAP

With the addition of spamdyke (qtp-install-spamdyke), you may find 
yourself not needing to front-end your new qmail with postfix. Spamdyke 
is a highly effective and extremely efficient anti-spam tool. It 
eliminates 90+% of spam without even receiving the whole message. It's 
truely amazing, and will lighten the load on your mail server as well. 
Unfortunately spamdyke is only available with the qmail mta at this time 
(not postfix or exim). If I had to pick one of spamdyke or spamassassin, 
I'd pick spamdyke. Fortunately though, with QMT you can use both. :)

I should add that many people use QMT as a front-end to Exchange. No 
surprise there really though.

HTH.

Disclaimer: I'm the project lead for QMT, so I might be biased. ;)

-- 
-Eric 'shubes'


!DSPAM:5168024e34141462916438!