[imp] authentication problem in log files

Andrew Heath imp@heathsworld.com
Thu, 18 Oct 2001 12:04:21 -0500


My version is IMP 2.2 Stable on Redhat 7.1

----- Original Message -----
From: "Andrew Heath" <imp@heathsworld.com>
To: "Kevin Monroe" <kevin@custom-tech.net>
Cc: <imp@lists.horde.org>
Sent: Thursday, October 18, 2001 11:55 AM
Subject: Re: [imp] authentication problem in log files


> No, I didn't receive any help from the group so I gave up. I am waiting
for
> the next full release with hopes that it does not pollute my logs like
this
> version does. Here is a snip from my logs below. This is one person
logging
> in, reading one message, and then logging out.  Phew!
>
> Andrew
>
> -------------------------------------
> Unusual System Events
> =-=-=-=-=-=-=-=-=-=-=
> Oct 18 11:45:49 firewall IMP[30679]: Login 209.215.192.253 to
localhost:143
> as andrew
> Oct 18 11:45:57 firewall IMP[32627]: Login 209.215.192.253 to
localhost:143
> as andrew
> Oct 18 11:46:06 firewall imap(pam_unix)[8215]: authentication failure;
> logname= uid=0 euid=0 tty= ruser= rhost=  user=andrew
> Oct 18 11:46:08 firewall imapd[8215]: Login failure user=andrew
> host=localhost.localdomain [127.0.0.1]
> Oct 18 11:46:11 firewall imapd[8215]: AUTHENTICATE LOGIN failure
> host=localhost.localdomain [127.0.0.1]
> Oct 18 11:46:11 firewall imap(pam_unix)[8215]: authentication failure;
> logname= uid=0 euid=0 tty= ruser= rhost=  user=andrew
> Oct 18 11:46:14 firewall imapd[8215]: Login failure user=andrew
> host=localhost.localdomain [127.0.0.1]
> Oct 18 11:46:17 firewall imapd[8215]: AUTHENTICATE LOGIN failure
> host=localhost.localdomain [127.0.0.1]
> Oct 18 11:46:17 firewall imap(pam_unix)[8215]: authentication failure;
> logname= uid=0 euid=0 tty= ruser= rhost=  user=andrew
> Oct 18 11:46:19 firewall imapd[8215]: Login failure user=andrew
> host=localhost.localdomain [127.0.0.1]
> Oct 18 11:46:22 firewall imapd[8215]: AUTHENTICATE LOGIN failure
> host=localhost.localdomain [127.0.0.1]
> Oct 18 11:46:22 firewall imapd[8215]: Logout user=???
> host=localhost.localdomain [127.0.0.1]
> Oct 18 11:46:38 firewall imap(pam_unix)[8224]: authentication failure;
> logname= uid=0 euid=0 tty= ruser= rhost=  user=andrew
> Oct 18 11:46:41 firewall imapd[8224]: Login failure user=andrew
> host=localhost.localdomain [127.0.0.1]
> Oct 18 11:46:44 firewall imapd[8224]: AUTHENTICATE LOGIN failure
> host=localhost.localdomain [127.0.0.1]
> Oct 18 11:46:44 firewall imap(pam_unix)[8224]: authentication failure;
> logname= uid=0 euid=0 tty= ruser= rhost=  user=andrew
> Oct 18 11:46:47 firewall imapd[8224]: Login failure user=andrew
> host=localhost.localdomain [127.0.0.1]
> Oct 18 11:46:50 firewall imapd[8224]: AUTHENTICATE LOGIN failure
> host=localhost.localdomain [127.0.0.1]
> Oct 18 11:46:51 firewall imap(pam_unix)[8224]: authentication failure;
> logname= uid=0 euid=0 tty= ruser= rhost=  user=andrew
> Oct 18 11:46:53 firewall imapd[8224]: Login failure user=andrew
> host=localhost.localdomain [127.0.0.1]
> Oct 18 11:45:42 firewall xinetd[8207]: USERID: imap OTHER :apache
> Oct 18 11:45:53 firewall xinetd[8209]: USERID: imap OTHER :apache
> Oct 18 11:46:03 firewall xinetd[8211]: USERID: imap OTHER :apache
> Oct 18 11:46:06 firewall xinetd[8213]: USERID: imap OTHER :apache
> Oct 18 11:46:06 firewall xinetd[8215]: USERID: imap OTHER :apache
> Oct 18 11:46:08 firewall xinetd[8218]: USERID: imap OTHER :apache
> Oct 18 11:46:21 firewall xinetd[8220]: USERID: imap OTHER :apache
> Oct 18 11:46:32 firewall xinetd[8222]: USERID: imap OTHER :apache
> Oct 18 11:46:37 firewall xinetd[8224]: USERID: imap OTHER :apache
> Oct 18 11:45:45 firewall imapd[8207]: imap service init from 127.0.0.1
> Oct 18 11:45:47 firewall imapd[8207]: Authenticated user=andrew
> host=localhost.localdomain [127.0.0.1]
> Oct 18 11:45:51 firewall imapd[8207]: Logout user=andrew
> host=localhost.localdomain [127.0.0.1]
> Oct 18 11:45:55 firewall imapd[8209]: imap service init from 127.0.0.1
> Oct 18 11:45:55 firewall imapd[8209]: Authenticated user=andrew
> host=localhost.localdomain [127.0.0.1]
> Oct 18 11:45:59 firewall imapd[8209]: Logout user=andrew
> host=localhost.localdomain [127.0.0.1]
> Oct 18 11:46:04 firewall imapd[8211]: imap service init from 127.0.0.1
> Oct 18 11:46:05 firewall imapd[8211]: Authenticated user=andrew
> host=localhost.localdomain [127.0.0.1]
> Oct 18 11:46:05 firewall imapd[8211]: Logout user=andrew
> host=localhost.localdomain [127.0.0.1]
> Oct 18 11:46:06 firewall imapd[8213]: imap service init from 127.0.0.1
> Oct 18 11:46:06 firewall imapd[8213]: Authenticated user=andrew
> host=localhost.localdomain [127.0.0.1]
> Oct 18 11:46:06 firewall imapd[8215]: imap service init from 127.0.0.1
> Oct 18 11:46:09 firewall imapd[8218]: imap service init from 127.0.0.1
> Oct 18 11:46:09 firewall imapd[8218]: Authenticated user=andrew
> host=localhost.localdomain [127.0.0.1]
> Oct 18 11:46:13 firewall imapd[8218]: Logout user=andrew
> host=localhost.localdomain [127.0.0.1]
> Oct 18 11:46:22 firewall imapd[8220]: imap service init from 127.0.0.1
> Oct 18 11:46:23 firewall imapd[8213]: Logout user=andrew
> host=localhost.localdomain [127.0.0.1]
> Oct 18 11:46:23 firewall imapd[8220]: Authenticated user=andrew
> host=localhost.localdomain [127.0.0.1]
> Oct 18 11:46:28 firewall imapd[8220]: Logout user=andrew
> host=localhost.localdomain [127.0.0.1]
> Oct 18 11:46:35 firewall imapd[8222]: imap service init from 127.0.0.1
> Oct 18 11:46:37 firewall imapd[8222]: Authenticated user=andrew
> host=localhost.localdomain [127.0.0.1]
> Oct 18 11:46:38 firewall imapd[8224]: imap service init from 127.0.0.1
>
> -----------------------------------
>
> ----- Original Message -----
> From: "Kevin Monroe" <kevin@custom-tech.net>
> To: <imp@heathsworld.com>
> Sent: Wednesday, October 17, 2001 5:48 PM
> Subject: Re: [imp] authentication problem in log files
>
>
> > Hi Andrew,
> >
> > Did you ever find the reason behind your system logs being full of
> > useless imap data?  The reason I'm asking is because I have the exact
> > same situation that you described in the mailing.www.horde-imp
> > newsgroup, and I would love to find a way to keep messages like these:
> >
> > Sep 30 13:05:53 dante xinetd[7623]: START: imap pid=23556
> > from=66.136.204.41
> > Sep 30 13:05:53 dante xinetd[23556]: USERID: imap OTHER :apache
> > Sep 30 13:05:53 dante xinetd[7623]: EXIT: imap pid=23556 duration=0(sec)
> >
> > Sep 30 13:05:55 dante xinetd[7623]: START: imap pid=23561
> > from=66.136.204.41
> > Sep 30 13:05:55 dante xinetd[23561]: USERID: imap OTHER :apache
> >
> > out of my log files...  Please let me know if you've come across a
> > solution!
> >
> > Thanks,
> > Kevin Monroe
> >
> >
>
>
> --
> IMP mailing list: http://horde.org/imp/
> Archive: http://marc.theaimsgroup.com/?l=imp&r=1&w=2
> Frequently Asked Questions: http://horde.org/faq/
> To unsubscribe, mail: imp-unsubscribe@lists.horde.org
>
>