here is a sample logfile: > Jul 17 22:54:54 derry cyrus/imaps[7568]: badlogin: serafinat.xxxxxx > [192.168.xx.xx] plain [SASL(-13): user not found: Password verification > failed] > Jul 17 22:54:59 derry cyrus/imaps[7568]: badlogin: serafinat.xxxxxx > [192.168.xx.xx] plaintext pressy SASL(-13): user not found: checkpass failed > Jul 17 22:55:56 derry cyrus/imaps[7568]: badlogin: serafinat.xxxxxx > [192.168.xx.xx] plain [SASL(-13): user not found: user: pressy@derry > property: cmusaslsecretPLAIN not found in sasldb] > Jul 17 22:56:01 derry cyrus/imaps[7568]: badlogin: serafinat.xxxxxx > [192.168.xx.xx] plaintext pressy SASL(-13): user not found: checkpass failed > Jul 17 22:56:29 derry cyrus/imaps[7568]: badlogin: serafinat.xxxxxx > [192.168.xx.xx] plain [SASL(-13): user not found: Password verification > failed] > Jul 17 22:56:35 derry cyrus/imaps[7568]: badlogin: serafinat.xxxxxx > [192.168.xx.xx] plaintext pressy SASL(-13): user not found: checkpass failed > Jul 18 16:46:42 derry cyrus/imaps[27449]: badlogin: serafinat.xxxxxx > [192.168.xx.xx] PLAIN [SASL(-13): user not found: Password verification > failed] > Jul 18 16:49:02 derry cyrus/imaps[27497]: badlogin: serafinat.xxxxxx > [192.168.xx.xx] PLAIN [SASL(-13): user not found: Password verification > failed] > Jul 18 16:52:07 derry cyrus/imaps[30126]: badlogin: serafinat.xxxxxx > [192.168.xx.xx] PLAIN [SASL(-13): user not found: Password verification > failed] > Jul 18 16:55:13 derry cyrus/imaps[30887]: badlogin: serafinat.xxxxxx > [192.168.xx.xx] PLAIN [SASL(-13): user not found: Password verification > failed] > Jul 18 16:58:19 derry cyrus/imaps[32633]: badlogin: serafinat.xxxxxx > [192.168.xx.xx] PLAIN [SASL(-13): user not found: Password verification > failed] > Jul 18 17:01:25 derry cyrus/imaps[2860]: badlogin: serafinat.xxxxxx > [192.168.xx.xx] PLAIN [SASL(-13): user not found: Password verification > failed] > Jul 18 17:04:30 derry cyrus/imaps[2917]: badlogin: serafinat.xxxxxx > [192.168.xx.xx] PLAIN [SASL(-13): user not found: Password verification > failed] > Jul 18 17:34:19 derry cyrus/imaps[18492]: badlogin: serafinat.xxxxxx > [192.168.xx.xx] PLAIN [SASL(-13): user not found: Password verification > failed] > Jul 18 17:35:15 derry cyrus/imap[18721]: badlogin: serafinat.xxxxxx > [192.168.xx.xx] PLAIN [SASL(-13): user not found: Password verification > failed] > Jul 18 17:37:25 derry cyrus/imap[20979]: badlogin: serafinat.xxxxxx > [192.168.xx.xx] PLAIN [SASL(-13): user not found: Password verification > failed]
actual i can't seemed to reproduce the "authentication failure" - type message. I'm not sure if this caused by my ldap-backend for user authentication. For all the different failure message that cyrus/imaps, I also use a more complex failregex. > failregex = ^%(__prefix_line)sbadlogin: \S+ \[<HOST>\] .* (\[|)SASL\(-13\): > ((generic|authentication) failure|user not found): ((checkpass|Password > verification) failed|user: .*)(\]|)$ Also I noticed that my plain debian stable reports non ssl connections als cyrus/imap (without the 'd' - see last two lines). So I change the daemon statement to: > _daemon = (?:cyrus/)?(?:imap(d|s|)?|pop3(d|s|)?) I left in the original imapd string even though i can't see it on my system. Might come up if some configuration are changed. -- GPG-FPrint: 292B 63BD 0402 DBCC 5026 6F90 AF1A 1478 94F3 7282 old PGP-FPrint: 68B0 853C 8754 F46A 903D 051F EFA1 267B --- I always figured a man was a damn fool if he got up before noon. - Charles Bukowski, Night Streets of Madness -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
