authentication problem in log files

Andrew Heath imp@heathsworld.com
Mon, 9 Jul 2001 15:02:05 -0500


 This is my syslog which contains auth errors. The oddity of this is that
IMP
 works fine. I know, why complain, well this is loading my logs with false
 data. The log below is a simple session of logging into an account, briefly
 looking at the inbox, and then pressing logout. Can anyone explain why this
 happens this way and how to possibly fix this?

 Thanks,
 Andrew imp@heathsworld.com

 Unusual System Events
 =-=-=-=-=-=-=-=-=-=-=
 Jul  2 13:13:56 firewall IMP[3744]: Login 209.315.192.253 to localhost:143
 as andrew
 Jul  2 13:14:15 firewall imap(pam_unix)[14292]: authentication failure;
 logname= uid=0 euid=0 tty= ruser= rhost=  user=andrew
 Jul  2 13:14:17 firewall imapd[14292]: Login failure user=andrew
 host=localhost.localdomain [127.0.0.1]
 Jul  2 13:14:20 firewall imapd[14292]: AUTHENTICATE LOGIN failure
 host=localhost.localdomain [127.0.0.1]
 Jul  2 13:14:20 firewall imap(pam_unix)[14292]: authentication failure;
 logname= uid=0 euid=0 tty= ruser= rhost=  user=andrew
 Jul  2 13:14:22 firewall imapd[14292]: Login failure user=andrew
 host=localhost.localdomain [127.0.0.1]
 Jul  2 13:14:25 firewall imapd[14292]: AUTHENTICATE LOGIN failure
 host=localhost.localdomain [127.0.0.1]
 Jul  2 13:14:25 firewall imap(pam_unix)[14292]: authentication failure;
 logname= uid=0 euid=0 tty= ruser= rhost=  user=andrew
 Jul  2 13:14:28 firewall imapd[14292]: Login failure user=andrew
 host=localhost.localdomain [127.0.0.1]
 Jul  2 13:14:31 firewall imapd[14292]: AUTHENTICATE LOGIN failure
 host=localhost.localdomain [127.0.0.1]
 Jul  2 13:14:31 firewall imapd[14292]: Logout user=???
 host=localhost.localdomain [127.0.0.1]
 Jul  2 13:13:52 firewall xinetd[14281]: USERID: imap OTHER :apache
 Jul  2 13:14:05 firewall xinetd[14285]: USERID: imap OTHER :apache
 Jul  2 13:14:13 firewall xinetd[14289]: USERID: imap OTHER :apache
 Jul  2 13:14:15 firewall xinetd[14292]: USERID: imap OTHER :apache
 Jul  2 13:13:54 firewall imapd[14281]: imap service init from 127.0.0.1
 Jul  2 13:13:55 firewall imapd[14281]: Authenticated user=andrew
 host=localhost.localdomain [127.0.0.1]
 Jul  2 13:13:59 firewall imapd[14281]: Logout user=andrew
 host=localhost.localdomain [127.0.0.1]
 Jul  2 13:14:11 firewall imapd[14285]: imap service init from 127.0.0.1
 Jul  2 13:14:14 firewall imapd[14285]: Authenticated user=andrew
 host=localhost.localdomain [127.0.0.1]
 Jul  2 13:14:14 firewall imapd[14289]: imap service init from 127.0.0.1
 Jul  2 13:14:14 firewall imapd[14289]: Authenticated user=andrew
 host=localhost.localdomain [127.0.0.1]
 Jul  2 13:14:15 firewall imapd[14292]: imap service init from 127.0.0.1
 Jul  2 13:14:15 firewall imapd[14285]: Logout user=andrew
 host=localhost.localdomain [127.0.0.1]
 Jul  2 13:14:31 firewall imapd[14289]: Logout user=andrew
 host=localhost.localdomain [127.0.0.1]