[SOLVED] Tracking user logins

[jefft@iri.columbia.edu]

I have a customer who believes someone else may be accessing her email. I'm wondering if there is a way to track logins for a specific account (time, ip address, etc.)

Anybody know where I get that info from?

Thanks in advance,

Jeff

[ArcaneMagus]

/opt/zimbra/log/audit.log ought to have the information that you are looking for in it.

Example line:

2009-10-14 12:20:31,226 INFO  [btpool0-1568] [name=user@domain.com;oip=xxx.xxx.xxx.xxx;ua=zclient/6.0.0_GA_1802.UBUNTU8_64;] security - cmd=Auth; account=user@domain.com; protocol=soap;

[jefft@iri.columbia.edu]

thanks very much, that was exactly what I was looking for,

jeff