Show username when there is SASL authentication failure

4 posts / 0 new
Topic locked
Last post
#1 Wed, 09/26/2018 - 01:14
kladizkov

Show username when there is SASL authentication failure

I'm using virtualmin with postfix and cyrus-sasl.

When ever there is an authentication failure it reports in /var/log/maillog below line.

postfix/smtpd[27669]: warning: unknown[185.xxx.xxx.xxx]: SASL LOGIN authentication failed: authentication failure

How can I make it so that it will also report the username that failed in the log file ( like SASL LOGIN authentication failed: authentication failure for alice )?

Wed, 09/26/2018 - 08:42
scotwnw

IF the user name exists on the system, it will show it. If an unknown user name is input, it shows "unknown" right before the IP.

Wed, 09/26/2018 - 23:44
kladizkov

"unknown" is the reverse lookup for the IP.

If there is a PTR set for that IP, then it will show like

warning: srv123454.hostname.com[xxx.xxx.xxx.xxx]: SASL LOGIN authentication failed: authentication failure

Sun, 10/14/2018 - 04:25
kladizkov

any one?

Topic locked