authentication problem in log files
Andrew Heath
imp@heathsworld.com
Mon, 9 Jul 2001 15:02:05 -0500
This is my syslog which contains auth errors. The oddity of this is that
IMP
works fine. I know, why complain, well this is loading my logs with false
data. The log below is a simple session of logging into an account, briefly
looking at the inbox, and then pressing logout. Can anyone explain why this
happens this way and how to possibly fix this?
Thanks,
Andrew imp@heathsworld.com
Unusual System Events
=-=-=-=-=-=-=-=-=-=-=
Jul 2 13:13:56 firewall IMP[3744]: Login 209.315.192.253 to localhost:143
as andrew
Jul 2 13:14:15 firewall imap(pam_unix)[14292]: authentication failure;
logname= uid=0 euid=0 tty= ruser= rhost= user=andrew
Jul 2 13:14:17 firewall imapd[14292]: Login failure user=andrew
host=localhost.localdomain [127.0.0.1]
Jul 2 13:14:20 firewall imapd[14292]: AUTHENTICATE LOGIN failure
host=localhost.localdomain [127.0.0.1]
Jul 2 13:14:20 firewall imap(pam_unix)[14292]: authentication failure;
logname= uid=0 euid=0 tty= ruser= rhost= user=andrew
Jul 2 13:14:22 firewall imapd[14292]: Login failure user=andrew
host=localhost.localdomain [127.0.0.1]
Jul 2 13:14:25 firewall imapd[14292]: AUTHENTICATE LOGIN failure
host=localhost.localdomain [127.0.0.1]
Jul 2 13:14:25 firewall imap(pam_unix)[14292]: authentication failure;
logname= uid=0 euid=0 tty= ruser= rhost= user=andrew
Jul 2 13:14:28 firewall imapd[14292]: Login failure user=andrew
host=localhost.localdomain [127.0.0.1]
Jul 2 13:14:31 firewall imapd[14292]: AUTHENTICATE LOGIN failure
host=localhost.localdomain [127.0.0.1]
Jul 2 13:14:31 firewall imapd[14292]: Logout user=???
host=localhost.localdomain [127.0.0.1]
Jul 2 13:13:52 firewall xinetd[14281]: USERID: imap OTHER :apache
Jul 2 13:14:05 firewall xinetd[14285]: USERID: imap OTHER :apache
Jul 2 13:14:13 firewall xinetd[14289]: USERID: imap OTHER :apache
Jul 2 13:14:15 firewall xinetd[14292]: USERID: imap OTHER :apache
Jul 2 13:13:54 firewall imapd[14281]: imap service init from 127.0.0.1
Jul 2 13:13:55 firewall imapd[14281]: Authenticated user=andrew
host=localhost.localdomain [127.0.0.1]
Jul 2 13:13:59 firewall imapd[14281]: Logout user=andrew
host=localhost.localdomain [127.0.0.1]
Jul 2 13:14:11 firewall imapd[14285]: imap service init from 127.0.0.1
Jul 2 13:14:14 firewall imapd[14285]: Authenticated user=andrew
host=localhost.localdomain [127.0.0.1]
Jul 2 13:14:14 firewall imapd[14289]: imap service init from 127.0.0.1
Jul 2 13:14:14 firewall imapd[14289]: Authenticated user=andrew
host=localhost.localdomain [127.0.0.1]
Jul 2 13:14:15 firewall imapd[14292]: imap service init from 127.0.0.1
Jul 2 13:14:15 firewall imapd[14285]: Logout user=andrew
host=localhost.localdomain [127.0.0.1]
Jul 2 13:14:31 firewall imapd[14289]: Logout user=andrew
host=localhost.localdomain [127.0.0.1]