[imp] authentication problem in log files

[Andrew Heath]

No, I didn't receive any help from the group so I gave up. I am waiting for
the next full release with hopes that it does not pollute my logs like this
version does. Here is a snip from my logs below. This is one person logging
in, reading one message, and then logging out.  Phew!

Andrew

-------------------------------------
Unusual System Events
=-=-=-=-=-=-=-=-=-=-=
Oct 18 11:45:49 firewall IMP[30679]: Login 209.215.192.253 to localhost:143
as andrew
Oct 18 11:45:57 firewall IMP[32627]: Login 209.215.192.253 to localhost:143
as andrew
Oct 18 11:46:06 firewall imap(pam_unix)[8215]: authentication failure;
logname= uid=0 euid=0 tty= ruser= rhost=  user=andrew
Oct 18 11:46:08 firewall imapd[8215]: Login failure user=andrew
host=localhost.localdomain [127.0.0.1]
Oct 18 11:46:11 firewall imapd[8215]: AUTHENTICATE LOGIN failure
host=localhost.localdomain [127.0.0.1]
Oct 18 11:46:11 firewall imap(pam_unix)[8215]: authentication failure;
logname= uid=0 euid=0 tty= ruser= rhost=  user=andrew
Oct 18 11:46:14 firewall imapd[8215]: Login failure user=andrew
host=localhost.localdomain [127.0.0.1]
Oct 18 11:46:17 firewall imapd[8215]: AUTHENTICATE LOGIN failure
host=localhost.localdomain [127.0.0.1]
Oct 18 11:46:17 firewall imap(pam_unix)[8215]: authentication failure;
logname= uid=0 euid=0 tty= ruser= rhost=  user=andrew
Oct 18 11:46:19 firewall imapd[8215]: Login failure user=andrew
host=localhost.localdomain [127.0.0.1]
Oct 18 11:46:22 firewall imapd[8215]: AUTHENTICATE LOGIN failure
host=localhost.localdomain [127.0.0.1]
Oct 18 11:46:22 firewall imapd[8215]: Logout user=???
host=localhost.localdomain [127.0.0.1]
Oct 18 11:46:38 firewall imap(pam_unix)[8224]: authentication failure;
logname= uid=0 euid=0 tty= ruser= rhost=  user=andrew
Oct 18 11:46:41 firewall imapd[8224]: Login failure user=andrew
host=localhost.localdomain [127.0.0.1]
Oct 18 11:46:44 firewall imapd[8224]: AUTHENTICATE LOGIN failure
host=localhost.localdomain [127.0.0.1]
Oct 18 11:46:44 firewall imap(pam_unix)[8224]: authentication failure;
logname= uid=0 euid=0 tty= ruser= rhost=  user=andrew
Oct 18 11:46:47 firewall imapd[8224]: Login failure user=andrew
host=localhost.localdomain [127.0.0.1]
Oct 18 11:46:50 firewall imapd[8224]: AUTHENTICATE LOGIN failure
host=localhost.localdomain [127.0.0.1]
Oct 18 11:46:51 firewall imap(pam_unix)[8224]: authentication failure;
logname= uid=0 euid=0 tty= ruser= rhost=  user=andrew
Oct 18 11:46:53 firewall imapd[8224]: Login failure user=andrew
host=localhost.localdomain [127.0.0.1]
Oct 18 11:45:42 firewall xinetd[8207]: USERID: imap OTHER :apache
Oct 18 11:45:53 firewall xinetd[8209]: USERID: imap OTHER :apache
Oct 18 11:46:03 firewall xinetd[8211]: USERID: imap OTHER :apache
Oct 18 11:46:06 firewall xinetd[8213]: USERID: imap OTHER :apache
Oct 18 11:46:06 firewall xinetd[8215]: USERID: imap OTHER :apache
Oct 18 11:46:08 firewall xinetd[8218]: USERID: imap OTHER :apache
Oct 18 11:46:21 firewall xinetd[8220]: USERID: imap OTHER :apache
Oct 18 11:46:32 firewall xinetd[8222]: USERID: imap OTHER :apache
Oct 18 11:46:37 firewall xinetd[8224]: USERID: imap OTHER :apache
Oct 18 11:45:45 firewall imapd[8207]: imap service init from 127.0.0.1
Oct 18 11:45:47 firewall imapd[8207]: Authenticated user=andrew
host=localhost.localdomain [127.0.0.1]
Oct 18 11:45:51 firewall imapd[8207]: Logout user=andrew
host=localhost.localdomain [127.0.0.1]
Oct 18 11:45:55 firewall imapd[8209]: imap service init from 127.0.0.1
Oct 18 11:45:55 firewall imapd[8209]: Authenticated user=andrew
host=localhost.localdomain [127.0.0.1]
Oct 18 11:45:59 firewall imapd[8209]: Logout user=andrew
host=localhost.localdomain [127.0.0.1]
Oct 18 11:46:04 firewall imapd[8211]: imap service init from 127.0.0.1
Oct 18 11:46:05 firewall imapd[8211]: Authenticated user=andrew
host=localhost.localdomain [127.0.0.1]
Oct 18 11:46:05 firewall imapd[8211]: Logout user=andrew
host=localhost.localdomain [127.0.0.1]
Oct 18 11:46:06 firewall imapd[8213]: imap service init from 127.0.0.1
Oct 18 11:46:06 firewall imapd[8213]: Authenticated user=andrew
host=localhost.localdomain [127.0.0.1]
Oct 18 11:46:06 firewall imapd[8215]: imap service init from 127.0.0.1
Oct 18 11:46:09 firewall imapd[8218]: imap service init from 127.0.0.1
Oct 18 11:46:09 firewall imapd[8218]: Authenticated user=andrew
host=localhost.localdomain [127.0.0.1]
Oct 18 11:46:13 firewall imapd[8218]: Logout user=andrew
host=localhost.localdomain [127.0.0.1]
Oct 18 11:46:22 firewall imapd[8220]: imap service init from 127.0.0.1
Oct 18 11:46:23 firewall imapd[8213]: Logout user=andrew
host=localhost.localdomain [127.0.0.1]
Oct 18 11:46:23 firewall imapd[8220]: Authenticated user=andrew
host=localhost.localdomain [127.0.0.1]
Oct 18 11:46:28 firewall imapd[8220]: Logout user=andrew
host=localhost.localdomain [127.0.0.1]
Oct 18 11:46:35 firewall imapd[8222]: imap service init from 127.0.0.1
Oct 18 11:46:37 firewall imapd[8222]: Authenticated user=andrew
host=localhost.localdomain [127.0.0.1]
Oct 18 11:46:38 firewall imapd[8224]: imap service init from 127.0.0.1

-----------------------------------

----- Original Message -----
From: "Kevin Monroe" <kevin@custom-tech.net>
To: <imp@heathsworld.com>
Sent: Wednesday, October 17, 2001 5:48 PM
Subject: Re: [imp] authentication problem in log files


> Hi Andrew,
>
> Did you ever find the reason behind your system logs being full of
> useless imap data?  The reason I'm asking is because I have the exact
> same situation that you described in the mailing.www.horde-imp
> newsgroup, and I would love to find a way to keep messages like these:
>
> Sep 30 13:05:53 dante xinetd[7623]: START: imap pid=23556
> from=66.136.204.41
> Sep 30 13:05:53 dante xinetd[23556]: USERID: imap OTHER :apache
> Sep 30 13:05:53 dante xinetd[7623]: EXIT: imap pid=23556 duration=0(sec)
>
> Sep 30 13:05:55 dante xinetd[7623]: START: imap pid=23561
> from=66.136.204.41
> Sep 30 13:05:55 dante xinetd[23561]: USERID: imap OTHER :apache
>
> out of my log files...  Please let me know if you've come across a
> solution!
>
> Thanks,
> Kevin Monroe
>
>