I am seeing entries like this in the audit.log:
2007-08-24 01:00:04,925 INFO [http-7071-Processor48] [ip=127.0.0.1;] security - cmd=AdminAuth; account=zimbra;
2007-08-24 01:00:04,926 INFO [http-7071-Processor48] [ip=127.0.0.1;] security - cmd=Auth; account=zimbra; protocol=soap;
Is that normal? |