Search code examples
smtpcentoseximdovecot

how exim show password on log files

I want to debug all auth session.

For example on /var/log/exim/mainlog display auth error like this;

login authenticator failed for (xx) [x.x.x.x]: 535 Incorrect authentication data (set_id=xxx)

login authenticator failed for (xx) [x.x.x.x]: 535 Incorrect authentication data (set_id=xxx)

login authenticator failed for (xx) [x.x.x.x]: 535 Incorrect authentication data (set_id=xxx)

but i want to display password too like this;

login authenticator failed for (xx) [x.x.x.x]: 535 Incorrect authentication data (set_id=xxx,set_pwd=yyy) login authenticator failed for (xx) [x.x.x.x]: 535 Incorrect authentication data (set_id=xxx,set_pwd=yyy) login authenticator failed for (xx) [x.x.x.x]: 535 Incorrect authentication data (set_id=xxx,set_pwd=yyy)

I changed dovecot conf and added;

auth_verbose = yes
auth_debug = yes
auth_debug_passwords = yes

but /var/log/exim/mainlog still doesn't display password and /var/log/maillog doesn't give any information about smtp.

So, how can i catch auth error with cleared text password.

Solution

  • I just found a solution.

    I changed dovecot.conf passdb options like;

    passdb {
  driver = checkpassword
  args = /etc/dovecot/chk.sh
}

    and write a bash script for write args on bash.log file.

    like

    #!/bin/bash
echo "$1 username and $2 password" > /etc/dovecot/log.txt