Navigation

    Kopano
    • Register
    • Login
    • Search
    • Categories
    • Get Official Kopano Support
    • Recent
    Statement regarding the closure of the Kopano community forum and the end of the community edition

    show user login history with ip address and username used

    Kopano Groupware Core
    6
    17
    1289
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • fbartels
      fbartels Kopano @micro last edited by

      @micro said in show user login history with ip address and username used:

      But how can we monitor WebApp logins?

      isn’t webapp logging this anymore?

      [Wed Mar 08 20:03:24.725781 2017] [:error] [pid 12297] [client aaa.bbb.ccc.ddd:4453] Kopano WebApp user: ysdxfsa: authentication failure at MAPI, referer: https://my.server.at/webapp/?logon
      

      https://forum.kopano.io/topic/108/how-to-protect-webapp-fail2ban

      Regards Felix

      Resources:
      https://kopano.com/blog/how-to-get-kopano/
      https://documentation.kopano.io/
      https://kb.kopano.io/

      Support overview:
      https://kopano.com/support/

      1 Reply Last reply Reply Quote 0
      • micro
        micro last edited by

        which log file is the line from? in your previous post you said:

        The way to find this information for WebApp logins is to query the webserver logging for it.

        I am only aware of webservers log mechanism (in my case apache2) which will write the access and error logs in “/var/log/apache/my-customized.log”. But the apache2 log does not contain such lines, they always start with an IP address and look like this:

        192.168.0.123 - - [20/Jan/2020:16:49:12 +0100] “POST /kopano.php?subsystem=webapp_8475519283644 HTTP/1.1” 200 597 “https://mykopano.example.tld/” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.108 Safari/537.36”

        I checked the WebApp admin manual, there is a logging directive which by default is OFF:

        define(‘LOG_USER_LEVEL’, LOGLEVEL_OFF);

        should I put this to LOGLEVEL_WARN ? which log file is written for WebApp then?

        fbartels 1 Reply Last reply Reply Quote 0
        • fbartels
          fbartels Kopano @micro last edited by

          @micro said in show user login history with ip address and username used:

          which log file is the line from

          In the past this was logged into the error.log. But for the WebApp log levels it may be more appropriate to ask in the webapp sub forum.

          Regards Felix

          Resources:
          https://kopano.com/blog/how-to-get-kopano/
          https://documentation.kopano.io/
          https://kb.kopano.io/

          Support overview:
          https://kopano.com/support/

          1 Reply Last reply Reply Quote 0
          • micro
            micro last edited by

            grep -R -i user /var/log/apache/*error*
            

            didn’t show any hits. There is no information about “user”. I will try to ask the question on the WebApp sub-forum and point to this thread…

            thank you so far Felix

            1 Reply Last reply Reply Quote 0
            • item
              item last edited by

              maybe try

               grep -R -i user /var/log/apache2/*
              
              1 Reply Last reply Reply Quote 1
              • micro
                micro last edited by

                @item: please read and think first

                externa1 1 Reply Last reply Reply Quote 0
                • externa1
                  externa1 @micro last edited by

                  @micro

                  I don’t know your configuration of apache2 but the default log is at /etc/apache2
                  and for me grep -R -i user /var/log/apache2/* works and gives output like :

                  /var/log/apache2/error.log.1:[Sun Jan 26 22:41:40.557437 2020] [:error] [pid 18123] [client 192.168.2.72:50142] Kopano WebApp user: georg: authentication failure at MAPI, referer: https://serveraddress/webapp/

                  rg
                  Christian

                  1 Reply Last reply Reply Quote 0
                  • micro
                    micro last edited by micro

                    Hi Chris,

                    certainly you did mean “…the default log is in /var/log/apache2” :) Thanks for the information, that is correct. But it shows the failed logins.

                    My question was related to “succeeded” logins to track when, who and which backend was used.

                    1 Reply Last reply Reply Quote 0
                    • micro
                      micro last edited by

                      anyone else? how can we

                      • track succeeded logins in Kopano ?
                      • track access (attach/open) to certain mailboxes (eg. when a user attaches or requests a particular mailbox, other than its own)

                      ?

                      fbartels 1 Reply Last reply Reply Quote 0
                      • fbartels
                        fbartels Kopano @micro last edited by

                        @micro have you checked the audit logging?

                        Regards Felix

                        Resources:
                        https://kopano.com/blog/how-to-get-kopano/
                        https://documentation.kopano.io/
                        https://kb.kopano.io/

                        Support overview:
                        https://kopano.com/support/

                        1 Reply Last reply Reply Quote 0
                        • klausade
                          klausade last edited by

                          A bit late, and maybe it’s already mentioned in the thread, but, are you looking for this:
                          https://forum.kopano.io/topic/2569/logging-of-login-attemts

                          1 Reply Last reply Reply Quote 0
                          • micro
                            micro last edited by

                            @klausade: THANK YOU!

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post