[SM-PLUGINS] Lockout plugin does not send notificiation email

SourceForge Headquarters 225 Broadway Suite 1600 San Diego, CA 92101 +1 (858) 454-5900

Hi,

     I am posting this thread here ( with history ), by suggestion of
Paul Lesniewski.

On Wed, Mar 12, 2008 at 3:21 PM, Paul Lesniewski <pa...@sq...> wrote:
>
> On Wed, Mar 12, 2008 at 7:46 AM, ca...@gm... <ca...@gm...> wrote:
>  >
>  > On Sun, Mar 9, 2008 at 11:40 PM, Paul Lesniewski <pa...@sq...> wrote:
>  >  >
>  >  > On Fri, Mar 7, 2008 at 7:53 PM, Paul Lesniewski <pa...@sq...> wrote:
>  >  >  > On Fri, Mar 7, 2008 at 1:08 PM, ca...@gm... <ca...@gm...> wrote:
>  >  >  >  > Hi,
>  >  >  >  >
>  >  >  >  >      I am having a problem with lockout-1.4-1.4.1 plugin.
>  >  >  >  >      Problem: the email to 'postmaster' ( configured in
>  >  >  >  >  lockout/data/config.php) is not being sent when there is a lockout.
>  >  >  >  >
>  >  >  >  >  My configs:
>  >  >  >  >
>  >  >  >  >  Active plugins ( in this order ).
>  >  >  >  >
>  >  >  >  >  bookmarks 2.0.3-1.4.1
>  >  >  >  >  msg_flags-1.4.10-1.4.3
>  >  >  >  >  change_pass-2.7a-1.4.x
>  >  >  >  >  lockout-1.4-1.4.1
>  >  >  >  >  squirrel_logger-2.0-1.2.7 ( docs ask to let it at the end of plugins list )
>  >  >  >  >
>  >  >  >  >  I am using compatibility-2.0.10-1.0 plugin ( not activated )
>  >  >  >  >
>  >  >  >  >  php 5.2.5
>  >  >  >  >  apache 2.2.8
>  >  >  >  >  Slackware 12.0.0
>  >  >  >  >  squirrelmail 1.4.13 ( Installed from squirrelmail site sources )
>  >  >  >  >
>  >  >  >  >  I am using $max_login_attempts= '3:6:30', not IP or CAPTCHA activated ( = '' ).
>  >  >  >  >
>  >  >  >  >  Squirrel_logger is working correctly in the same context, I mean, it
>  >  >  >  >  sends emails when there is "spam abuse suspect", to postmaster, and
>  >  >  >  >  logs to syslog correctly.
>  >  >  >  >
>  >  >  >  >  No errors in /var/log/httpd/error.log.
>  >  >  >  >
>  >  >  >  >  User is being blocked after 3 failure login attempts ( not tested
>  >  >  >  >  automatic unblocking by time ).
>  >  >  >  >  If I remove the correct line from
>  >  >  >  >  lockout_plugin_login_failure_information.pref, user is authorized to
>  >  >  >  >  login, imediately.
>  >  >  >  >  When user is blocked, it can not login and the "access denied" message
>  >  >  >  >  is displayed.
>  >  >  >  >
>  >  >  >  >  Until now I didn't notice any other problem with my Squirrelmail.
>  >  >  >  >
>  >  >  >  >  So, everything appears to be working as expected, except for the
>  >  >  >  >  missing notification email.
>  >  >  >
>  >  >  >  I think this is due to changes in the mail sending API internally in
>  >  >  >  the SM core since the plugin's last release.  I was looking at
>  >  >  >  releasing another version somewhat soon, so I'll take a look in the
>  >  >  >  next couple days.  Please check the website by Monday and respond on
>  >  >  >  this thread if the problem still exists OR EVEN IF IT DOES NOT.
>  >  >
>  >  >  Maybe try end-of-day Monday or possibly Tuesday... it was a hard weekend.  :-)
>  >
>  >      Sorry for delaying my answer ( health problems - still "recovering" ).
>  >
>  >      Problem remains.
>  >
>  >      I did:
>  >
>  >     -Update Lockout plugin ( removed the old and fresh installed the
>  >  new ). Version now: 1.5
>  >     -Update Compatibility plugin ( removed the old and fresh installed
>  >  the new). Version now: 2.0.11 ( not activated)
>  >     -Captcha Version 1.1 is installed, but NOT active and NOT used by lockout.
>  >     -Squirrel_logger NOT updated. I included LOCKOUT event in its configuration.
>  >
>  >     When an user violates the Lockout condition (3:6:30), a message is
>  >  logged as configured and user is locked as expected. Squirrel_logger
>  >  continues to log messages as configured, but there is no e-mail about
>  >  Lockout violation.
>  >
>  >      I don't know if it matters, but, my Squirrelmail is configured to
>  >  use SMTPS, port 465 and to authenticate to SMTP server as the user
>  >  that logged to squirrelmail/imap ( I mean: user bob logged at
>  >  squirrelmail and squirrelmail use bob to autenticate to the smtp
>  >  server to send messages).
>  >
>  >      What can I do to help you to find the answer?
>
>  Verify the value of $lockout_notification_addresses, indicate which
>  rule you are setting to 3:6:30, and then watch your SMTP server's log
>  file when a lockout occurs.  It should have the most useful
>  information about what is going wrong.  Also watch your web server log
>  file for any problems there and give more details about your SMTP
>  server.
>
>  FWIW, this thread probably should have been posted on the plugins mailing list.
>
>  Thanks,
>  Paul

     Sorry for delaying the answer ( I am still dealing with some
health problems ).

     $lockout_notification_addresses = 'postmaster' ( as suggested in
the config.php. Same value is used in squirrel_logger plugin ).

     $max_login_attempts = '3:6:30'

     SMTP: Postfix 2.4.6, cyrus-sasl 2.1.22 ( users/passwd in
/etc/shadow ), courier-imap-4.3.0, courier-authlib-0.60.2.

     Postfix has 3 services running: port 25, to act as MX ( receive
mails from _no_ authenticated users), port 465, to act as MSA to
Outlook users and some Java apps ( uses SSL/TLS, just for
authenticated users ), port 587 to all other clients, acting as MSA
too ( uses SSL/TLS, just for authenticated users).

     Postfix packages were compiled from sources. Does not use mysql
or ldap. I am using Slackware 12.0.0 in this server.

     Not sure if these lines are the hint we are looking for ( lot of
log lines and no information that allows me to be sure that it was
lockout plugin trying to send email) but they appeared ( three tests )
when I tried to log more than 3 times with wrong pass. ( real hostname
name were changed to myhostname ).

Mar 18 11:48:34 myhostname postfix/smtpd[14134]: connect from
localhost[127.0.0.1]
Mar 18 11:48:34 myhostname postfix/smtpd[14134]: warning: SASL
authentication failure: All-whitespace username.
Mar 18 11:48:34 myhostname postfix/smtpd[14134]: warning:
localhost[127.0.0.1]: SASL LOGIN authentication failed: generic
failure
Mar 18 11:48:34 myhostname postfix/smtpd[14134]: lost connection after
AUTH from localhost[127.0.0.1]
Mar 18 11:48:34 myhostname postfix/smtpd[14134]: disconnect from
localhost[127.0.0.1]

     My /var/log/httpd/error_log shows nothing relevant ( I think )
during all the time I was testing lockout plugin. I see the following
errors, but I think they are not related. Anyway: ( my real hostname
and domain were changed to myhostname.mydomain.com ).

[Tue Mar 18 07:24:28 2008] [error] [client 10.0.0.2] PHP Warning:
preg_match_all() [<a
href='function.preg-match-all'>function.preg-match-all</a>]: No ending
delimiter '/' found in /var/www/htdocs/webmail/functions/mime.php on
line
2356, referer: https://myhostname.mydomain.com/webmail/src/read_body.php?mailbox=INBOX&passed_id=351&startMessage=1

[Tue Mar 18 07:43:28 2008] [error] [client 10.0.0.2] PHP Warning:
preg_match_all() [<a
href='function.preg-match-all'>function.preg-match-all</a>]: No ending
delimiter '/' found in /var/www/htdocs/webmail/functions/mime.php on
line
2356, referer: https://myhostname.mydomain.com/webmail/src/read_body.php?mailbox=INBOX&passed_id=351&startMessage=1
[Tue Mar 18 10:35:13 2008] [error] [client 10.0.0.2] PHP Notice:
Undefined variable: passed_id in
/var/www/htdocs/webmail/src/download.php on line 56, referer:
https://myhostname.mydomain.com/webmail/src/webmail.php?right_frame=download.php
[Tue Mar 18 10:35:13 2008] [error] [client 10.0.0.2] PHP Notice:
Undefined variable: passed_id in
/var/www/htdocs/webmail/src/download.php on line 61, referer:
https://myhostname.mydomain.com/webmail/src/webmail.php?right_frame=download.php

     I tested the "unblocking" feature and it is working fine. ( I
mean, user was unblocked without my intervention ).

     Please, let me know what can I do to help you to help me. :-)

     Thank you for your attention.

     Best regards,

Freitas