Log of user login?

[merlin88]

Hello,

searched for that topic, but no luck. Is it possible to find out, when a specific user logged in? The reason is, I can see an access attempt on my firewall, but would like to know, if someone tried to login or successfully logged in to a specific account at that access time. Just to make sure, the system is not compromized or someone use a bad password / or someone find out the password of some of our users.

Best regards and thanks in advance

merlin88

[ls-al]

you have to enable the audit logging for the remote client interface (or pop, if using this).

a log-level of 9 has all informations.

please refer to the man-page of omconfaud

the log goes to /var/opt/scalix/??/s/logs/audit

Please note that the audit log has no rotation by default. usage of ommaint (see http://www.scalix.com/wiki/index.php?title=Admin_Resource_Kit#Basic_monitoring_of_Scalix_with_ommaint) is highliy recommended.

cheers,
Dirk

[merlin88]

Whow, that was a quick response. Didn't thougt I'd get in answer by tonight.

Best regards to Leipzig.