Hi,
I use RoundCube with Apache on Debian. I'd like to see all tries of connexion (especially the errors, but right connexions are needed too). I did not found this parameter in RoundCube's configuration.
Do you have any clue ?
Thanks.
David.
List info: http://lists.roundcube.net/users/
David BERCOT wrote:
Hi,
I use RoundCube with Apache on Debian. I'd like to see all tries of connexion (especially the errors, but right connexions are needed too). I did not found this parameter in RoundCube's configuration.
There's 'log_logins' option (since r1483) for logging successful logins. There's no such option for unsuccessful logins.
Hi!
Several thoughts:
- Write a small parser of apace access log.
If there is just a POST to the root, there is the error If there is a POST to the root and the next url is /?_task=mail this means that the login is successful
Here is the example of the access_log. The first line is the error attempt, and the 2 others are successful:
A.B.C.D - - [17/Nov/2008:22:57:57 +0300] "POST / HTTP/1.0" 200 1190 A.B.C.D - - [17/Nov/2008:22:58:05 +0300] "POST / HTTP/1.0" 302 26 A.B.C.D - - [17/Nov/2008:22:58:05 +0300] "GET /?_task=mail HTTP/1.0" 200 6425
- The second way is to analyse logs of the imap server.
- The third way is to path RoundCube or whait for this logic to be
created (as you've got the answer from A.L.E.C that there's 'log_logins' option, but no 'log_error_logins')
On Mon, 17 Nov 2008 19:38:36 +0100, David BERCOT debian@bercot.org wrote:
I use RoundCube with Apache on Debian. I'd like to see all tries of connexion (especially the errors, but right connexions are needed too). I did not found this parameter in RoundCube's configuration.
Do you have any clue ?
-- bessarabov _______________________________________________ List info: http://lists.roundcube.net/users/
Hi again,
Le Mon, 17 Nov 2008 19:48:16 +0100, "A.L.E.C" alec@alec.pl a écrit :
David BERCOT wrote:
Hi,
I use RoundCube with Apache on Debian. I'd like to see all tries of connexion (especially the errors, but right connexions are needed too). I did not found this parameter in RoundCube's configuration.
There's 'log_logins' option (since r1483) for logging successful logins. There's no such option for unsuccessful logins.
Thanks for the quick answer ;-)
I think it's very surprising we can't log unsuccessful logins !!! For security reasons, it seems necessary, no ?
For the 'log_logins', I've added : $rcmail_config['log_logins'] = TRUE; in /etc/roundcube/main.inc.php but I can't see successfull logins !?!? Are there syslog logs (I'd like it ;-))) or should I search in other place ?
Thanks.
David.
List info: http://lists.roundcube.net/users/
OoO Pendant le repas du lundi 17 novembre 2008, vers 19:38, David BERCOT debian@bercot.org disait :
I use RoundCube with Apache on Debian. I'd like to see all tries of connexion (especially the errors, but right connexions are needed too). I did not found this parameter in RoundCube's configuration.
You can look here: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=505267
There is a proposed patch to enable logging of unsuccesful logins.
C'est vrai peut t'on renconter quelqu'un sur internet? Car moi je cherche l'ame soeur -+- SR in: Guide du Neuneu d'Usenet - Neuneu a-t-il une âme ? -+-
List info: http://lists.roundcube.net/users/
What is your version of RoundCube?
'log_login' appeared only in 1483 ( http://trac.roundcube.net/changeset/1483 ), so, the first tag of RoundCube where it appeared is v0.2-alpha.
On Mon, 17 Nov 2008 21:23:46 +0100, David BERCOT debian@bercot.org wrote:
I use RoundCube with Apache on Debian. I'd like to see all tries of connexion (especially the errors, but right connexions are needed too). I did not found this parameter in RoundCube's configuration.
There's 'log_logins' option (since r1483) for logging successful logins. There's no such option for unsuccessful logins.
I think it's very surprising we can't log unsuccessful logins !!! For security reasons, it seems necessary, no ?
For the 'log_logins', I've added : $rcmail_config['log_logins'] = TRUE; in /etc/roundcube/main.inc.php but I can't see successfull logins !?!? Are there syslog logs (I'd like it ;-))) or should I search in other place ?
-- bessarabov _______________________________________________ List info: http://lists.roundcube.net/users/
-
A.L.E.C -
bessarabov -
David BERCOT -
Vincent Bernat