login/logout logs?

[ianare]

Does scalix keep a record of who logs in, out and when of the webmail interface? If so how would I access it?

TIA.

[dkelly]

If you enable auditing on the Remote Client Interface and Imap Server Daemon, you will get a record in /var/opt/scalix/logs/audit like this

Code: Select all

user-signon
time 1161964678 Fri Oct 27 08:57:58 2006 -420
user-agent-id SWA client
client-type 12
client-ip 10.17.112.90
user 113 Peter Principal/mondas,scalix/CN=Peter Principal 36008 36008
signon-status 0

Take a look at the man page for omshowaud and omconfaud.

To configure the IMAP server, you will need to use the -a switch for the commands.

When you make the changes, you will need to stop and start the IMAP server and Remote Client interface but this will disconnect any clients that are currently signed on so you should do this after hours.

Cheers

Dave

[chris]

Hi ianare,

check /opt/scalix-tomcat/logs/scalix-api.log

for entries that look like the following

2006-10-23 18:58:58,290 DEBUG [CheckAuthInterceptor.preHandle:49] User Jody.Krasden@scalix.demo authenticated

If you grep over /opt/scalix-tomcat/logs with one of your users' names you'll see a couple of the other relavant types of entries as well.

Cheers,

Chris

Edit: Dave's answer is better - I hadn't seen it between opening the thread and posting much later.

[ianare]

Thanks guys. Now when I set the logging up using

Code: Select all

omconfaud RCI 1
omconfaud -a IMAP 1

will that setting 'stick' through scalix restarts? I run a daily backup script that shuts down the server during rsync.

Also, I saw there was a config file /var/opt/scalix/sys/audit.cfg from the man page that would allow me to put this log on a separate file, but did not find "remote client interface" in it. Is it the same as

% 26 web-client ~/logs/audit