Re: [SM-PLUGINS] lockout plugin problems

[Paul L. <pa...@sq...>]

On 11/3/14, Alex <mys...@gm...> wrote:
> Hi,
> I'm using a squirrelmail 1.4.23SVN snapshot and having trouble with
> the lockout plugin. I had it configured on a test system many months
> ago, and I thought it was working properly, but now it's not.

What did you change?  Did you diff the two environments?  It's all
about specifics.

> There are no php errors in the logs, and my configtest.php looks okay.

Please show your PHP error level settings and configtest output.

> Squirrelmail otherwise works fine. I'm not sure how to further debug
> this, and really hoped someone could help. I've configured
> locked_out.php with my own text, and it's never printed. I've also
> installed and enabled the compatibility plugin. The
> lockout_plugin_login_failure_information.pref has old entries in it
> where it once worked properly.

Then the best starting point is to try to undo recent changes until it
works, then put each change back in place one at a time until things
break.

Otherwise, try installing a parallel SM install and only activate the
lockout plugin - nothing else.  Then add in your other plugins and
customizations one at a time.

> squirrelmail_access_log has the failed
> login entries, but there are no new entries in the
> lockout_plugin_login_failure_information.pref file after trying and
> failing to login $max_login_attempts times.

Make sure other pref files (normal ones for users) are being written.
Make sure you have error verbosity turned all the way up in php.ini.
Put some debug output in the plugin where it tries to count login
failures.

> I've included my config.php below (using example.com)
>
> $use_lockout_rules = 1;
> $reverseLockout = '';
> $at = '@';
> $obey_x_forwarded_headers = 0;
> $max_login_attempts = '6:10:30';
> $max_login_attempts_per_IP = '';
> $activate_CAPTCHA_after_failed_attempts = '';
> $lockout_notification_addresses = 'gd...@ex...';
> $log_violated_lockout_rules = 1;
> $log_violated_max_user_logins = 1;
> $log_violated_max_IP_logins = 0;
> $log_CAPTCHA_enabled = 0;
> $lockout_useSendmail = NULL;
> $lockout_smtpServerAddress = NULL;
> $lockout_smtpPort = NULL;
> $lockout_sendmail_path = NULL;
> $lockout_sendmail_args = NULL;
> $lockout_pop_before_smtp = NULL;
> $lockout_encode_header_key = NULL;
> $lockout_smtp_auth_mech = NULL;
> $lockout_smtp_sitewide_user = NULL;
> $lockout_smtp_sitewide_pass = NULL;

-- 
Paul Lesniewski
SquirrelMail Team
Please support Open Source Software by donating to SquirrelMail!
http://squirrelmail.org/donate_paul_lesniewski.php