IMP Login: errors in syslog

Lee Nelson jld123@pobox.com
Thu, 05 Apr 2001 02:12:43 -0400


Hi,

  I've just installed IMP 2.2.4, and my users love it!

  It works perfectly, but I get lots of errors in /var/log/messages.
I've tried to track them down with no success.  All I know is that
when I login to IMAP manually using the command:

   'L123 LOGIN lnelson password'

  No messages get sent to the syslog.  But tcpdump reveals that
IMP is using 'AUTHENTICATE LOGIN' instead, and this seems like
it could be part of the problem.

  Can anyone please look at these messages and offer an opinion?

  I'm running Red Hat Linux 6.2, with UW IMAP 4.7-5.  Each login
causes this entire block of messages.  Addresses changed to
protect the vulnerable. 

  1.2.3.4     = remote web browser client
  192.168.1.1 = web/IMAP/imp server

Apr  5 00:54:28 www IMP[839]: Login 1.2.3.4 to mail.example.com:143 as
lnelson
Apr  5 00:54:32 www PAM_pwdb[22220]: authentication failure; (uid=0) ->
lnelson for imap service
Apr  5 00:54:33 www imapd[22220]: Login failure user=lnelson
host=www.example.com [192.168.1.1]
Apr  5 00:54:36 www imapd[22220]: AUTHENTICATE LOGIN failure
host=www.example.com [192.168.1.1]
Apr  5 00:54:36 www PAM_pwdb[22220]: authentication failure; (uid=0) ->
lnelson for imap service
Apr  5 00:54:37 www imapd[22220]: Login failure user=lnelson
host=www.example.com [192.168.1.1]
Apr  5 00:54:40 www imapd[22220]: AUTHENTICATE LOGIN failure
host=www.example.com [192.168.1.1]
Apr  5 00:54:40 www PAM_pwdb[22220]: authentication failure; (uid=0) ->
lnelson for imap service
Apr  5 00:54:41 www imapd[22220]: Login failure user=lnelson
host=www.example.com [192.168.1.1]
Apr  5 00:54:44 www imapd[22220]: AUTHENTICATE LOGIN failure
host=www.example.com [192.168.1.1]
Apr  5 00:54:44 www imapd[22220]: Logout user=??? host=www.example.com
[192.168.1.1]


  Thanks in advance, and thanks for a great product!

    Lee Nelson