Re: [Exim] Tracking authentications

Pàgina inicial
Delete this message
Reply to this message
Autor: jzaw
Data:  
A: Dan Egli
CC: exim-users
Assumpte: Re: [Exim] Tracking authentications
On Saturday, Sep 20, 2003, at 15:53 Europe/London, Dan Egli wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> IS there a way to make Exim log who has authenticated? the reject log
> shows failed authentications, but I want to track SUCCESSFULL
> authentications



youll get something like this in your main log


Sep 20 16:24:56 w exim[26108]: 2003-09-20 16:24:56 1A0jbU-0006n6-77 <=
jz@???
H=w.dnsalias.org (w.dnsalias.org) [217.155.135.45] U=someuser P=asmtp
A=auth_cram:someusername
S=556 id=74335CE1-EB7E-11D7-8BCB-003065427DF8@???

Sep 20 16:25:00 w exim[26109]: 2003-09-20 16:25:00 1A0jbU-0006n6-77 =>
jzaw@???
R=dnslookup T=remote_smtp H=mx1.mail.yahoo.com [64.157.4.78]

Sep 20 16:25:00 w exim[26109]: 2003-09-20 16:25:00 1A0jbU-0006n6-77
Completed


notice the serialisation they all have in common     1A0jbU-0006n6-77
(is of course unique to the message)
you can see which user authenticated and what method
and you can track it to see if the send was completed in this case it
took about 4 seconds to complete
the lines may have other messages in between them so look for the
message serial