Is there anyone else, who needs permanently to show authentication 
information multiple times in unsecured plain text?

If I would be your boss, you would get fired immediatly.

Both AUTHLog... options are for debugging and problem fixing only - not 
for permanently usage!

Thomas





Von:    "K Post" <nntp.p...@gmail.com>
An:     "ASSP development mailing list" <assp-test@lists.sourceforge.net>
Datum:  08.12.2019 02:08
Betreff:        [Assp-test] Put user ID in warning message of failed smtp 
auth



Could a configuration option be added to put the userid that is attempted 
with SMTP authentication only when auth fails?  I'd like to be able to 
alert on that failure, showing not only the IP of the attempt, but the 
username too.

What I'd really like is:
  Dec-07-19 19:41:11 a.b.c.d warning: SMTP authentication failed for 
attempte...@wahtever.org on w.x.y.z
That way I could admin alert on "SMTP authentication failed" and it would 
show me the username.

Currently, I have 
$main::AUTHLogUser = 1;
in /lib/correctASSP.cfg which works great to put lines

Every time someone authenticates against ASSP, I'll see:
Dec-07-19 19:41:11 a.b.c.d info: authentication - login is used
Dec-07-19 19:41:11 a.b.c.d info: authentication (LOGIN) realms - 
user:testu...@ourcharity.org

I don't necessarily want that every time, but I do want it in the logs to 
be able to reference when authentication fails.  On a failure, it shows:

Dec-07-19 19:41:11 a.b.c.d info: authentication - login is used
Dec-07-19 19:41:11 a.b.c.d info: authentication (LOGIN) realms - 
user:testu...@ourcharity.org
Dec-07-19 19:41:11 Info: notification message queued to sent to 
m...@ourcharity.org
Dec-07-19 19:41:11 a.b.c.d warning: SMTP authentication failed on w.x.y.z
Dec-07-19 19:41:11 a.b.c.d [SMTP Error] 535 Authentication failed. 
Restarting authentication process.

But the username isn't in a single line with the failure warning.  Could 
that be changed please?



_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test




DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally 
privileged and protected in law and are intended solely for the use of the 

individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no 
known virus in this email!
*******************************************************


_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to