I need to set a variable
set acl_m_auth_failed = true
If authentication fails. How do I do that?
On 6/6/2013 8:06 AM, Dean Brooks wrote:
> Unlike routers, authenticators don't "do" anything. They simply describe
> a configuration for that type of authentication.
>
> To do something on a failed login, you have to use ACL configurations
> as described by others.
>
> --
> Dean Brooks
> dean@???
>
> On Thu, Jun 06, 2013 at 07:49:09AM -0700, Marc Perkel wrote:
>> Here are my authenticators:
>>
>> dovecot_plain:
>> driver = dovecot
>> public_name = PLAIN
>> server_socket = /var/run/dovecot/auth-client
>> server_set_id = $auth1
>>
>> dovecot_login:
>> driver = dovecot
>> public_name = LOGIN
>> server_socket = /var/run/dovecot/auth-client
>> server_set_id = $auth1
>>
>> How would I add something like server_condition that would let me do
>> something on a failed login?
>>
>>
>>
>> On 6/5/2013 11:01 AM, Dave Restall - System Administrator,,, wrote:
>>> Hi Marc,
>>>
>>>> Is there a way for an ACL to do something on authentication failure? I'm
>>>> trying to trap the IP addresses of hackers trying to guess passwords.
>>>>
>>>> Thanks in advance
>>> Have a look at acl_smtp_auth. I also use an extended or condition on the authentication :-
>>>
>>> ....
>>>
>>> server_condition = ${if or {${authenticated_lookup} {${perl{Run_A_PERL_SCRIPT_HERE}}}}}
>>>
>>> My actual condition is a bit more complicated but the above serves
>>> to illustrate.
>>>
>>> It basically says if the authenticated lookup succeeds, then continue
>>> if it fails then run the perl script. You can then do the processing
>>> with the perl script - I use it to count failed attempts and log them
>>> to a file - it could quite easily be used to firewall IP addresses etc.
>>>
>>> Typical old fashioned shell script short circuit.
>>>
>>> Regards,
>>>
>>>
>>>
>>>
>>> D
>>> lists/exim/users/2013-06-05.tx exim-users
>>> +----------------------------------------------------------------------------+
>>> | Dave Restall, Computer Anorak, Geek, Cyclist, Radio Amateur G4FCU, Bodger |
>>> | Mob +44 (0) 7973 831245 Skype: dave.restall Radio: G4FCU |
>>> | email : dave@??? - Anti-SocialMediaist - Web : Not Ready Yet :-( |
>>> +----------------------------------------------------------------------------+
>>> | Q: What do you call a half-dozen Indians with Asian flu? A: |
>>> | Six sick Sikhs (sic). |
>>> +----------------------------------------------------------------------------+
>>>
>>>
>>>
>>>
>>
>> --
>> ## List details at https://lists.exim.org/mailman/listinfo/exim-users
>> ## Exim details at http://www.exim.org/
>> ## Please use the Wiki with this list - http://wiki.exim.org/
>>
