Q: Dovecot log wrong passwords in plain text

Discussion in 'ISPConfig 3 Priority Support' started by macguru, Sep 7, 2018.

  1. macguru

    macguru Member HowtoForge Supporter

    Hi !
    For whatever reason logging of wrong Dovecot stopped working (possibly after upgrade of ISPConfig to 3.13 or Debian 9 security patches), but unfortunately I can't say for sure.
    tail -n 1000000 /var/log/mail.log | grep pop3-login | grep failed
    shows failed entries, however
    tail -n 1000000 /var/log/mail.log | grep mismatch
    shows nothing - no recorded bogus passwords.
    Options in /etc/dovecot/conf.d/10-logging.conf
    auth_verbose = yes
    auth_verbose_passwords = plain
    auth_debug_passwords = yes

    What is a cause of such problem?
    Thanks in advance for any suggestion(s).
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    Settings in /etc/dovecot/conf.d/* files are not used on an ISPConfig server. Add settings in dovecot.conf file if you want to change something and make it update safe by copying the appropriate modified template from install/tpl/ of the ISPConfig tar.gz to the /usr/local/ispconfig/server/conf-custom/install/ folder.
  3. macguru

    macguru Member HowtoForge Supporter

    Ok, thanks, modified dovecot.conf, now worked.

Share This Page