Hello Mark and All!
I am again with imapd syslog facility problem.
In the /etc/syslog.conf we are have:
======================================================================
# Log anything 'info' or higher, but lower than 'warn'.
# Exclude authpriv, cron, mail, and news. These are logged elsewhere.
*.info;*.!warn;\
authpriv.none;cron.none;mail.none;news.none;\
local3.none;local4.none -/var/log/messages
# Mail related logs:
mail.* @loghost
======================================================================
We are got all maillog at remote @loghost and all other at local
/var/log/messages That's works fine.
But in case a login failure (imap or pop3), output continues to be directed
with the AUTH (LOG_AUTH) syslog facility. And put into local
/var/log/messages That's not good for me.
I started looking into ./src/osdep/unix/env_unix.c and found, that you
override syslog facility from LOG_MAIL to LOG_AUTH like this:
======================================================================
syslog (level|LOG_AUTH,"Login %s user=%.64s auth=%.64s host=%.80s",err,
user,(authuser && *authuser) ? authuser : user,tcp_clienthost ());
======================================================================
And in that case maillogin failure logging at local /var/log/messages
I remove all "|LOG_AUTH" from syslog func at ./src/osdep/unix/env_unix.c
and "login failure" start logging with MAIL facility.
Maybe, it's help someone.
=koc
_______________________________________________
Imap-uw mailing list
[email protected]
https://mailman1.u.washington.edu/mailman/listinfo/imap-uw
