Linode Forum
https://forum.linode.com/

Logging usernames with qpopper...
https://forum.linode.com/viewtopic.php?f=11&t=935
Page 1 of 1

Author:  shpstr [ Wed Jun 09, 2004 6:04 am ]
Post subject:  Logging usernames with qpopper...

Hey.
I am launching qpopper with xinetd. (on a RH7.1 machine)
I need to log the username of everyone who checks their mail..

I have added this in the pop3 config file for xinetd:

log_type = FILE /var/log/pop3.log
log_on_success = HOST USERID

And this is what's being logged to /var/log/pop3.log:

04/6/9@12:08:36: START: pop3 from=0.1.2.3
04/6/9@12:08:37: START: pop3 from=1.1.2.3
04/6/9@12:08:43: START: pop3 from=2.1.2.3
04/6/9@12:08:56: START: pop3 from=3.1.2.3
04/6/9@12:09:07: START: pop3 from=4.1.2.3

Any idea on how I can get the usernames to pop up in my logfile?

Author:  vitrum [ Wed Jun 09, 2004 6:07 pm ]
Post subject: 

It's been at least 2-3 years since I used Qpopper, and I wrote a POP before SMTP script that monitored /var/log to do it... I don't recall it being that difficult though, and the usernames were automatically being logged...

Just noticed this though in the manual on Qualcomm's web site...

Quote:
log-login

When set, Qpopper logs successful
authentications using the specified
string. Within the string, an
occurrence of %0 is replaced with the
Qpopper version, %1 with the user
name, %2 with the user's host name,
and %3 with the user's IP address.
Default: none, unless
--enable-log-login used with
./configure, in which case (v%0)
POP login by user \%1\ at (%2) %3 is
used.


Did you compile it yourself? Maybe missed a option...

Author:  rhashimoto [ Wed Jun 09, 2004 6:41 pm ]
Post subject:  Re: Logging usernames with qpopper...

shpstr wrote:
I have added this in the pop3 config file for xinetd:


I think you're looking in the wrong place. All xinetd is doing is monitoring inbound port connections - it doesn't know anything about POP3 authentication. That information is going to come from the POP3 server. You should be playing with qpopper configuration, not xinetd.

It's quite possible that qpopper is already logging to /var/log/mail.log or similar. Try grep -i pop /var/log/* and see if anything 'pops' up.

Page 1 of 1 All times are UTC-04:00
Powered by phpBB® Forum Software © phpBB Group
http://www.phpbb.com/