On 2013-06-08 6:09 AM, Bogdan Enache <enachebog...@gmx.com> wrote:
But how can I also show the username that was tried in the logs? I want
to see:
1. Which user keeps entering the wrong password.
2. What user is someone else trying to hijack.
Since you left out the critical fact that you are using dovecot sasl, I
didn't respond to this.
Dovecot uses login_log_format_elements to determine what it logs for
login attempts... you'll find the variables it supports here:
http://wiki2.dovecot.org/Variables?highlight=%28login_log_format_elements%29
Mine (which logs the username) looks like:
login_log_format_elements = user=<%u> method=%m rip=%r lport=%{lport}
mpid=%e %c session=<%{session}>
Hope this helps...
Charles
