On Thu, Mar 13, 2008 at 11:57:31AM +0100, Ciprian Marius Vizitiu wrote: > Hi listers, > > > > It's written in the manuals that by creating a folder under > /var/lib/imap/log/username Cyrus will log at protocol level details for > "username". Question: how can I do the same for a mailbox which is above > user.* level? Of course I could enable logging for all users =:-o and then > try to correlate those logs but I thought I should ask. > > > > Background: on a perfectly functioning Cyrus IMAP some of my users are... > abusing one common IMAP folder in subtle ways so I just want to be able to > catch the offenders that's why I'm only interested in the "COPY" and/or > "APPEND" commands. My "Auditlog" patches would probably be pretty handy for that! You would get log entries for every append and copy, associated via sessionid to a login event. You'll need both: cyrus-sessionid-2.3.11.diff and cyrus-auditlog-2.3.11.diff from http://cyrus.brong.fastmail.fm/ (and you'll have to build cyrus from source or a custom package for your packaging system as appropriate) you also need to add 'auditlog: yes' to the imapd.conf. Bron. ---- Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
