Re: Show username for SASL LOGIN authentication failed:?

2013-06-10 Thread Bogdan Enache
Hi. On 09.06.2013 18:12, Charles Marcus wrote: On 2013-06-09 10:34 AM, Zhang Huangbin zhbmaillisto...@gmail.com wrote: On Sunday, June 9, 2013 at 10:09 PM, Charles Marcus wrote: Dovecot uses login_log_format_elements to determine what it logs for login attempts... you'll find the variables it

Re: Show username for SASL LOGIN authentication failed:?

2013-06-10 Thread Charles Marcus
On 2013-06-10 4:57 PM, Bogdan Enache enachebog...@gmx.com wrote: Hi. On 09.06.2013 18:12, Charles Marcus wrote: On 2013-06-09 10:34 AM, Zhang Huangbin zhbmaillisto...@gmail.com wrote: On Sunday, June 9, 2013 at 10:09 PM, Charles Marcus wrote: Dovecot uses login_log_format_elements to

Re: Show username for SASL LOGIN authentication failed:?

2013-06-09 Thread Wietse Venema
Benny Pedersen: Bogdan Enache skrev den 2013-06-08 12:09: mx1 postfix/smtpd[1069]: warning: unknown[89.xx.xx.xx]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Which is perfectly normal. normal in what way ? i have seen this here aswell with that user But how can I also show

Re: Show username for SASL LOGIN authentication failed:?

2013-06-09 Thread Bogdan Enache
Hi list. On 09.06.2013 03:35, LuKreme wrote: On 08 Jun 2013, at 04:09 , Bogdan Enache enachebog...@gmx.com wrote: But how can I also show the username that was tried in the logs? I want to see: 1. Which user keeps entering the wrong password. 2. What user is someone else trying to hijack.

Re: Show username for SASL LOGIN authentication failed:?

2013-06-09 Thread Charles Marcus
On 2013-06-08 6:09 AM, Bogdan Enache enachebog...@gmx.com wrote: But how can I also show the username that was tried in the logs? I want to see: 1. Which user keeps entering the wrong password. 2. What user is someone else trying to hijack. Since you left out the critical fact that you are

Re: Show username for SASL LOGIN authentication failed:?

2013-06-09 Thread Zhang Huangbin
On Sunday, June 9, 2013 at 10:09 PM, Charles Marcus wrote: Dovecot uses login_log_format_elements to determine what it logs for login attempts... you'll find the variables it supports here: http://wiki2.dovecot.org/Variables?highlight=%28login_log_format_elements%29 Mine (which logs

Re: Show username for SASL LOGIN authentication failed:?

2013-06-09 Thread Jerry
On Sun, 09 Jun 2013 16:44:13 +0300 Bogdan Enache articulated: Unfortunately if I try lowering it from 10 to 3 I will receive like 20 phone calls a day about users that don't know how to check when CAPS LOCK is on or off. 20 calls from 20,000 users would be insignificant. From 100 users, a

Re: Show username for SASL LOGIN authentication failed:?

2013-06-09 Thread Charles Marcus
On 2013-06-09 10:34 AM, Zhang Huangbin zhbmaillisto...@gmail.com wrote: On Sunday, June 9, 2013 at 10:09 PM, Charles Marcus wrote: Dovecot uses login_log_format_elements to determine what it logs for login attempts... you'll find the variables it supports here:

Show username for SASL LOGIN authentication failed:?

2013-06-08 Thread Bogdan Enache
Hi. When an user inputs an incorrect password, I have the following message in the logs: mx1 postfix/smtpd[1069]: warning: unknown[89.xx.xx.xx]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Which is perfectly normal. But how can I also show the username that was tried in the logs? I want to

Re: Show username for SASL LOGIN authentication failed:?

2013-06-08 Thread Wietse Venema
Bogdan Enache: Hi. When an user inputs an incorrect password, I have the following message in the logs: mx1 postfix/smtpd[1069]: warning: unknown[89.xx.xx.xx]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Which is perfectly normal. 'UGFzc3dvcmQ6' decodes into 'Password:'. That's part of

Re: Show username for SASL LOGIN authentication failed:?

2013-06-08 Thread LuKreme
On 08 Jun 2013, at 04:09 , Bogdan Enache enachebog...@gmx.com wrote: But how can I also show the username that was tried in the logs? I want to see: 1. Which user keeps entering the wrong password. 2. What user is someone else trying to hijack. Are you using courier authlib? It has a

Re: Show username for SASL LOGIN authentication failed:?

2013-06-08 Thread Benny Pedersen
Bogdan Enache skrev den 2013-06-08 12:09: mx1 postfix/smtpd[1069]: warning: unknown[89.xx.xx.xx]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Which is perfectly normal. normal in what way ? i have seen this here aswell with that user But how can I also show the username that was tried in