RE: Different auth logging with cache lookup. (OPEN)

[Eikås Arvid]

No, the problem is the logging of the cache lookup with password mismatch. 
(release 2.3.17)
We missing client IP and user in the cache lookup logging.   

auth-worker(1676266): Info: conn unix:auth-worker  (pid=1675846,uid=97): 
auth-worker<2>: Password mismatch (given  password: )

Arvid



-Original Message-
From: Aki Tuomi  
Sent: tirsdag 22. februar 2022 09:15
To: Eikås Arvid ; dovecot@dovecot.org
Subject: Re: Different auth logging with cache lookup. (OPEN)


> On 22/02/2022 09:42 Eikås Arvid  wrote:
> 
> 
> dovecot-2.3.5 and centos 7
> User and IP are logged in both scenarios.
> auth-worker(26145): sql(user,1.1.1.1,): Password mismatch
> auth-worker(13380): cache(u...@online.no,1.1.1.1): Password mismatch
> 
> 
> 
> 
> dovecot-2.3.17 and rhel 8
> Feb 03 14:42:53 auth-worker(1676266): Info: conn unix:auth-worker 
> (pid=1675846,uid=97): auth-worker<1>: sql(user,127.0.0.1,): 
> Password mismatch (given password: ) Feb 03 14:43:48 
> auth-worker(1676266): Info: conn unix:auth-worker 
> (pid=1675846,uid=97): auth-worker<2>: Password mismatch (given 
> password: )
> 
> User and IP is not logged in cache lookup.
> Is this a design change or a unplanned change?
> 
> Any ide when it was changed?

Looks more like 2.3.5 is incorrectly checking both cache and sql?

Aki

Different auth logging with cache lookup. (OPEN)

[Eikås Arvid]

dovecot-2.3.5 and centos 7
User and IP are logged in both scenarios.
auth-worker(26145): sql(user,1.1.1.1,): Password mismatch
auth-worker(13380): 
cache(u...@online.no,1.1.1.1): Password mismatch




dovecot-2.3.17 and rhel 8
Feb 03 14:42:53 auth-worker(1676266): Info: conn unix:auth-worker 
(pid=1675846,uid=97): auth-worker<1>: sql(user,127.0.0.1,): Password 
mismatch (given password: )
Feb 03 14:43:48 auth-worker(1676266): Info: conn unix:auth-worker 
(pid=1675846,uid=97): auth-worker<2>: Password mismatch (given password: )

User and IP is not logged in cache lookup.
Is this a design change or a unplanned change?

Any ide when it was changed?

Different auth logging with cache lookup. (OPEN)

[Eikås Arvid]

dovecot-2.3.5 and centos 7
User and IP are logged in both scenarios.
auth-worker(26145): sql(user,1.1.1.1,): Password mismatch
auth-worker(13380): cache(u...@online.no,1.1.1.1): Password mismatch




dovecot-2.3.17 and rhel 8
Feb 03 14:42:53 auth-worker(1676266): Info: conn unix:auth-worker 
(pid=1675846,uid=97): auth-worker<1>: sql(user,127.0.0.1,): Password 
mismatch (given password: )
Feb 03 14:43:48 auth-worker(1676266): Info: conn unix:auth-worker 
(pid=1675846,uid=97): auth-worker<2>: Password mismatch (given password: )

User and IP is not logged in cache lookup.
Is this a design change or a unplanned change?

Any ide when it was changed?