(no subject)

View: New views
8 Messages — Rating Filter:   Alert me  

(no subject)

by Binny Mandvia-2 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Some parts of this message have been removed. Learn more about Nabble's security policy.
Hi,
I wanted to know with part of squirrelmail will check for user and password.If its correct then it goes to redirect.php.If incorrect which part of the code will be executed.
I have modified login.php according to our needs, but it is not able to log failed logins in /var/log/maillog.

Regards,
Binny Mandvia




Yahoo! recommends that you upgrade to the new and safer Internet Explorer 8.
------------------------------------------------------------------------------
Enter the BlackBerry Developer Challenge  
This is your chance to win up to $100,000 in prizes! For a limited time,
vendors submitting new applications to BlackBerry App World(TM) will have
the opportunity to enter the BlackBerry Developer Challenge. See full prize  
details at: http://p.sf.net/sfu/Challenge
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

Re: (no subject)

by cowboy0721 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

i did not read the code.
i think it  check the uid/pwd  by the imap server.

Binny Mandvia wrote:

> Hi,
> I wanted to know with part of squirrelmail will check for user and
> password.If its correct then it goes to redirect.php.If incorrect
> which part of the code will be executed.
> I have modified login.php according to our needs, but it is not able
> to log failed logins in /var/log/maillog.
>
> Regards,
> Binny Mandvia
>
>
>
> ------------------------------------------------------------------------
> Yahoo! recommends that you upgrade to the new and safer Internet
> Explorer 8
> <http://in.rd.yahoo.com/tagline_ie8_1/*http://downloads.yahoo.com/in/internetexplorer/>.
>
> ------------------------------------------------------------------------
>
> ------------------------------------------------------------------------------
> Enter the BlackBerry Developer Challenge  
> This is your chance to win up to $100,000 in prizes! For a limited time,
> vendors submitting new applications to BlackBerry App World(TM) will have
> the opportunity to enter the BlackBerry Developer Challenge. See full prize  
> details at: http://p.sf.net/sfu/Challenge
> ------------------------------------------------------------------------
>
> -----
> squirrelmail-users mailing list
> Posting guidelines: http://squirrelmail.org/postingguidelines
> List address: squirrelmail-users@...
> List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
> List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

------------------------------------------------------------------------------
Enter the BlackBerry Developer Challenge  
This is your chance to win up to $100,000 in prizes! For a limited time,
vendors submitting new applications to BlackBerry App World(TM) will have
the opportunity to enter the BlackBerry Developer Challenge. See full prize  
details at: http://p.sf.net/sfu/Challenge
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

Re: (no subject)

by Binny Mandvia-2 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Some parts of this message have been removed. Learn more about Nabble's security policy.
Hi,

I got failed logging fix with logger command

Following is the code for the same.

$username = $_POST['login_username'];
$ip = getenv('REMOTE_ADDR');
$output = shell_exec('logger -p mail.error Login Failed for user  ' .$username. '  from IP Address ' .$ip. ' [Password Incorrect]');
echo ("alert('Password Incorrect');\n");

 O/P format in maillog is :
Jul 10 12:25:46 postfix logger: Login Failed for user binny.mandvia from IP Address 10.10.0.67 [Password Incorrect]

Can any one tell if squirrel_logger reads specific log format for failed login ?? Right now it is not able to log failed logins in squirrel_logger.


 Binny Mandvia


>i did not read the code.
>i think it  check the uid/pwd  by the imap server.

Binny Mandvia wrote:

> Hi,
> I wanted to know with part of squirrelmail will check for user and
> password.If its correct then it goes to redirect.php.If incorrect
> which part of the code will be executed.
> I have modified login.php according to our needs, but it is not able
> to log failed logins in /var/log/maillog.
>
> Regards,
> Binny Mandvia
>
>
>
> ------------------------------------------------------------------------
> Yahoo! recommends that you upgrade to the new and safer Internet
> Explorer 8
> <http://in.rd.yahoo.com/tagline_ie8_1/*http://downloads.yahoo.com/in/internetexplorer/>.
>
> ------------------------------------------------------------------------
>
> ------------------------------------------------------------------------------
> Enter the BlackBerry Developer Challenge 
> This is your chance to win up to $100,000 in prizes! For a limited time,
> vendors submitting new applications to BlackBerry App World(TM) will have
> the opportunity to enter the BlackBerry Developer Challenge. See full prize 
> details at: http://p.sf.net/sfu/Challenge
> ------------------------------------------------------------------------
>
> -----
> squirrelmail-users mailing list
> Posting guidelines: http://squirrelmail.org/postingguidelines
> List address: squirrelmail-users@...
> List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
> List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

------------------------------------------------------------------------------
Enter the BlackBerry Developer Challenge 
This is your chance to win up to $100,000 in prizes! For a limited time,
vendors submitting new applications to BlackBerry App World(TM) will have
the opportunity to enter the BlackBerry Developer Challenge. See full prize 
details at: http://p.sf.net/sfu/Challenge
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users


Love Cricket? Check out live scores, photos, video highlights and more. Click here.
------------------------------------------------------------------------------
Enter the BlackBerry Developer Challenge  
This is your chance to win up to $100,000 in prizes! For a limited time,
vendors submitting new applications to BlackBerry App World(TM) will have
the opportunity to enter the BlackBerry Developer Challenge. See full prize  
details at: http://p.sf.net/sfu/Challenge
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

SM-USERS] Failed Login issue

by Binny Mandvia-2 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Some parts of this message have been removed. Learn more about Nabble's security policy.
Hi,

I got failed logging fix with logger command

Following is the code for the same.

$username = $_POST['login_username'];
$ip = getenv('REMOTE_ADDR');
$output = shell_exec('logger -p mail.error Login Failed for user  ' .$username. '  from IP Address ' .$ip. ' [Password Incorrect]');
echo ("alert('Password Incorrect');\n");

 O/P format in maillog is :
Jul 10 12:25:46 postfix logger: Login Failed for user binny.mandvia from IP Address 10.10.0.67 [Password Incorrect]

Can any one tell if squirrel_logger reads specific log format for failed login ?? Right now it is not able to log failed logins in squirrel_logger.


 Binny Mandvia


>i did not read the code.
>i think it  check the uid/pwd  by the imap server.

Binny Mandvia wrote:

> Hi,
> I wanted to know with part of squirrelmail will check for user and
> password.If its correct then it goes to redirect.php.If incorrect
> which part of the code will be executed.
> I have modified login.php according to our needs, but it is not able
> to log failed logins in /var/log/maillog.
>
> Regards,
> Binny Mandvia
>
>
>
> ------------------------------------------------------------------------
> Yahoo! recommends that you upgrade to the new and safer Internet
> Explorer 8
> <http://in.rd.yahoo.com/tagline_ie8_1/*http://downloads.yahoo.com/in/internetexplorer/>.
>
> ------------------------------------------------------------------------
>
> ------------------------------------------------------------------------------
> Enter the BlackBerry Developer Challenge 
> This is your chance to win up to $100,000 in prizes! For a limited time,
> vendors submitting new applications to BlackBerry App World(TM) will have
> the opportunity to enter the BlackBerry Developer Challenge. See full prize 
> details at: http://p.sf.net/sfu/Challenge
> ------------------------------------------------------------------------
>
> -----
> squirrelmail-users mailing list
> Posting guidelines: http://squirrelmail.org/postingguidelines
> List address: squirrelmail-users@...
> List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
> List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

------------------------------------------------------------------------------
Enter the BlackBerry Developer Challenge 
This is your chance to win up to $100,000 in prizes! For a limited time,
vendors submitting new applications to BlackBerry App World(TM) will have
the opportunity to enter the BlackBerry Developer Challenge. See full prize 
details at: http://p.sf.net/sfu/Challenge
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users


Love Cricket? Check out live scores, photos, video highlights and more. Click here.


Yahoo! recommends that you upgrade to the new and safer Internet Explorer 8.
------------------------------------------------------------------------------
Enter the BlackBerry Developer Challenge  
This is your chance to win up to $100,000 in prizes! For a limited time,
vendors submitting new applications to BlackBerry App World(TM) will have
the opportunity to enter the BlackBerry Developer Challenge. See full prize  
details at: http://p.sf.net/sfu/Challenge
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

Re: (no subject)

by cowboy0721 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

may be you must use the FULLPATH of logger


CHEN,Zi-zhao
zizhao@...



Binny Mandvia wrote:

> Hi,
>
> I got failed logging fix with logger command
>
> Following is the code for the same.
>
> $username = $_POST['login_username'];
> $ip = getenv('REMOTE_ADDR');
> $output = shell_exec('logger -p mail.error Login Failed for user  '
> .$username. '  from IP Address ' .$ip. ' [Password Incorrect]');
> echo ("alert('Password Incorrect');\n");
>
>  O/P format in maillog is :
> Jul 10 12:25:46 postfix logger: Login Failed for user binny.mandvia
> from IP Address 10.10.0.67 [Password Incorrect]
>
> Can any one tell if squirrel_logger reads specific log format for
> failed login ?? Right now it is not able to log failed logins in
> squirrel_logger.
>
>
>  Binny Mandvia
>
>
> **>i did not read the code.
> >i think it  check the uid/pwd  by the imap server.
>
> Binny Mandvia wrote:
> > Hi,
> > I wanted to know with part of squirrelmail will check for user and
> > password.If its correct then it goes to redirect.php.If incorrect
> > which part of the code will be executed.
> > I have modified login.php according to our needs, but it is not able
> > to log failed logins in /var/log/maillog.
> >
> > Regards,
> > Binny Mandvia
> >
> >
> >
> > ------------------------------------------------------------------------
> > Yahoo! recommends that you upgrade to the new and safer Internet
> > Explorer 8
> >
> <http://in.rd.yahoo.com/tagline_ie8_1/*http://downloads.yahoo.com/in/internetexplorer/>.
>
> >
> > ------------------------------------------------------------------------
> >
> >
> ------------------------------------------------------------------------------
> > Enter the BlackBerry Developer Challenge
> > This is your chance to win up to $100,000 in prizes! For a limited
> time,
> > vendors submitting new applications to BlackBerry App World(TM) will
> have
> > the opportunity to enter the BlackBerry Developer Challenge. See
> full prize
> > details at: http://p.sf.net/sfu/Challenge
> > ------------------------------------------------------------------------
> >
> > -----
> > squirrelmail-users mailing list
> > Posting guidelines: http://squirrelmail.org/postingguidelines
> > List address: squirrelmail-users@...
> <mailto:squirrelmail-users@...>
> > List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
> > List info (subscribe/unsubscribe/change options):
> https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
>
> ------------------------------------------------------------------------------
> Enter the BlackBerry Developer Challenge
> This is your chance to win up to $100,000 in prizes! For a limited time,
> vendors submitting new applications to BlackBerry App World(TM) will have
> the opportunity to enter the BlackBerry Developer Challenge. See full
> prize
> details at: http://p.sf.net/sfu/Challenge
> -----
> squirrelmail-users mailing list
> Posting guidelines: http://squirrelmail.org/postingguidelines
> List address: squirrelmail-users@...
> <mailto:squirrelmail-users@...>
> List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
> List info (subscribe/unsubscribe/change options):
> https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
>
> ------------------------------------------------------------------------
> Love Cricket? Check out live scores, photos, video highlights and
> more. Click here
> <http://in.rd.yahoo.com/tagline_cricket_2/*http://cricket.yahoo.com>.
> ------------------------------------------------------------------------
>
> ------------------------------------------------------------------------------
> Enter the BlackBerry Developer Challenge  
> This is your chance to win up to $100,000 in prizes! For a limited time,
> vendors submitting new applications to BlackBerry App World(TM) will have
> the opportunity to enter the BlackBerry Developer Challenge. See full prize  
> details at: http://p.sf.net/sfu/Challenge
> ------------------------------------------------------------------------
>
> -----
> squirrelmail-users mailing list
> Posting guidelines: http://squirrelmail.org/postingguidelines
> List address: squirrelmail-users@...
> List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
> List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

------------------------------------------------------------------------------
Enter the BlackBerry Developer Challenge  
This is your chance to win up to $100,000 in prizes! For a limited time,
vendors submitting new applications to BlackBerry App World(TM) will have
the opportunity to enter the BlackBerry Developer Challenge. See full prize  
details at: http://p.sf.net/sfu/Challenge
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

Re: SM-USERS] Failed Login issue

by Paul Lesniewski :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Please do not top post.

>> I wanted to know with part of squirrelmail will check for user and
>> password.If its correct then it goes to redirect.php.If incorrect
>> which part of the code will be executed.

src/redirect.php itself checks the username and password -- it does so
by using the credentials to log into the IMAP server.  The login call
itself will print out the failed login message if the credentials are
bad.

>> I have modified login.php according to our needs, but it is not able
>> to log failed logins in /var/log/maillog.

You need to install the Squirrel Logger plugin.

> I got failed logging fix with logger command

I cannot understand what this means.

> Following is the code for the same.
>
> $username = $_POST['login_username'];
> $ip = getenv('REMOTE_ADDR');
> $output = shell_exec('logger -p mail.error Login Failed for user  '
> .$username. '  from IP Address ' .$ip. ' [Password Incorrect]');
> echo ("alert('Password Incorrect');\n");

Why are you calling an external logging command instead of using the
Squirrel Logger plugin to log to syslog?

>  O/P format in maillog is :
> Jul 10 12:25:46 postfix logger: Login Failed for user binny.mandvia from IP
> Address 10.10.0.67 [Password Incorrect]
>
> Can any one tell if squirrel_logger reads specific log format for failed
> login ?? Right now it is not able to log failed logins in squirrel_logger.

Squirrel Logger doesn't read your logs.  It writes to them.  It does
in fact log failed logins, but it has nothing to do with the code you
create above.

>>i did not read the code.
>>i think it  check the uid/pwd  by the imap server.

--
Paul Lesniewski
SquirrelMail Team
Please support Open Source Software by donating to SquirrelMail!
http://squirrelmail.org/donations.php

------------------------------------------------------------------------------
Enter the BlackBerry Developer Challenge  
This is your chance to win up to $100,000 in prizes! For a limited time,
vendors submitting new applications to BlackBerry App World(TM) will have
the opportunity to enter the BlackBerry Developer Challenge. See full prize  
details at: http://p.sf.net/sfu/Challenge
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

Re: (no subject)

by Paul Lesniewski :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

On 7/9/09, Binny Mandvia <binnym85@...> wrote:
> Hi,
> I wanted to know with part of squirrelmail will check for user and
> password.If its correct then it goes to redirect.php.If incorrect which part
> of the code will be executed.

No, redirect.php IS what "checks" the username/pwd.  It does so by
asking the IMAP server to authenticate the user.  If it fails, the SM
core function that handles the IMAP authentication call itself will
print the login failure to screen.

> I have modified login.php according to our needs, but it is not able to log
> failed logins in /var/log/maillog.

All you have to do is install the Squirrel Logger plugin.  You don't
need to modify SquirrelMail at all.

--
Paul Lesniewski
SquirrelMail Team
Please support Open Source Software by donating to SquirrelMail!
http://squirrelmail.org/donations.php

------------------------------------------------------------------------------
Enter the BlackBerry Developer Challenge  
This is your chance to win up to $100,000 in prizes! For a limited time,
vendors submitting new applications to BlackBerry App World(TM) will have
the opportunity to enter the BlackBerry Developer Challenge. See full prize  
details at: http://p.sf.net/sfu/Challenge
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

Re: (no subject)

by Paul Lesniewski :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

>>> I wanted to know with part of squirrelmail will check for user and
>>> password.If its correct then it goes to redirect.php.If incorrect
>>> which part of the code will be executed.
>>> I have modified login.php according to our needs, but it is not able
>>> to log failed logins in /var/log/maillog.
>>
>>i did not read the code.
>>i think it  check the uid/pwd  by the imap server.
>
> I got failed logging fix with logger command
>
> Following is the code for the same.
>
> $username = $_POST['login_username'];
> $ip = getenv('REMOTE_ADDR');
> $output = shell_exec('logger -p mail.error Login Failed for user  '
> .$username. '  from IP Address ' .$ip. ' [Password Incorrect]');
> echo ("alert('Password Incorrect');\n");

Where did you put this code?  You don't need any of it.  Just use
Squirrel Logger and it will put login failures into your syslog.

>  O/P format in maillog is :
> Jul 10 12:25:46 postfix logger: Login Failed for user binny.mandvia from IP
> Address 10.10.0.67 [Password Incorrect]
>
> Can any one tell if squirrel_logger reads specific log format for failed
> login ?? Right now it is not able to log failed logins in squirrel_logger.

Squirrel Logger doesn't read your logs.  It can be configured to write to them.

--
Paul Lesniewski
SquirrelMail Team
Please support Open Source Software by donating to SquirrelMail!
http://squirrelmail.org/donations.php

------------------------------------------------------------------------------
Enter the BlackBerry Developer Challenge  
This is your chance to win up to $100,000 in prizes! For a limited time,
vendors submitting new applications to BlackBerry App World(TM) will have
the opportunity to enter the BlackBerry Developer Challenge. See full prize  
details at: http://p.sf.net/sfu/Challenge
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users