How to see who logs in via IMAP

[jstrat]

I need to track who is using the IMAP server on my installation. Is there a log of this information already, or if not is there a tweak to some configuration to get Zimbra to spit this stuff out.

I can see more of what's going on with the web interface, but those users who only use IMAP are lost.

Cheers
Jason

[KevinH]

zimbra.log has this info with a little command like foo...

[zimbra@dogfood log]$ grep ImapServer zimbra.log | grep 'name='

2006-12-28 00:40:15,712 INFO  [ImapServer-6786] [ip=127.0.0.1;name=dfdf@zimbra.com;] cache - Loading flagset cache
2006-12-28 02:51:35,956 INFO  [ImapServer-7164] [ip=127.0.0.1;name=dfdfdf@zimbra.com;] imap - [ search is: in:"INBOX/Deleted Messages" (before:12/22/06) ]
2006-12-28 04:03:15,081 INFO  [ImapServer-7369] [ip=127.0.0.1;name=dfdfd@zimbra.com;] cache - Loading flagset cache

Not perfect but it will get you enough to at least get a rough view of who is using IMAP. We are using the imap proxy(perdition) so that's why all the IP's are 127.0.0.1.

[vshah]

Does the audit.log only show web and ZCO connects then?

[schemers]

The audit.log was updated at some point to show soap/pop/imap logins, IIRC.

[jstrat]

Unless that update to audit.log was only done in 4.0.5 its not been released. audit.log was the first place I checked. This is where I expected to find the trail.

I'll have another look at zimbra.log to see if I can find what I need.

Thanks

[schemers]

Looks like it will be in 4.5. Bug number was 10673:

http://bugzilla.zimbra.com/show_bug.cgi?id=10673

[jstrat]

Thats good, roll on 4.5
Thanks for the info.