On Mon, Oct 06, 2003 at 03:09:11PM -0400, Jason Murray wrote:
> only found hints and teases. 
> Does sqwebmail log information, and where to?
> I have seen hints that on some systems, it goes into the cgi_error log file;
> I, however, do not have this log on my system.

It goes to whatever log the CGI's stderr output goes to. Under Apache this
is conventionally a file called "error_log" in the same directory as
"access_log". However not much gets logged there, only catastrophic
failures.

> I'd really like to be able to tell if new users (who get a default password)
> change from the default to something (hopefully) more secure; gotta close as
> many backdoors as possible...

An alternative route is to probe their account with the default password and
see if it still works.

Regards,

Brian.

Reply via email to