[BlueOnyx:10826] Re: 5106R login list

[Chuck Tetlow]

You're looking for login information in two different locations.

The OpenWebMail info is in /var/log/openwebmail.log.  To see the logins via OpenWebMail, use the command:
cat /var/log/openwebmail.log | grep login | less

But to see who is logging in via POP and/or IMAP - check the /var/log/secure file.  To see just the POP & IMAP logins with their login date/time, use:
cat /var/log/secure | grep dovecot-auth | grep "session opened" | cut -d " " -f1,2,3,11 | less

Or if you want to see just the usernames of who has logged in, without all the date/time information and duplications - use:
cat /var/log/secure | grep dovecot-auth | grep "session opened" | cut -d " " -f11 | sort -u | less

Good luck.

Chuck

---------- Original Message -----------
From: Lew Berry <LCBerry at lcbconsulting.net> 
To: BlueOnyx General Mailing List <blueonyx at mail.blueonyx.it> 
Sent: Mon, 18 Jun 2012 17:36:24 +0000 
Subject: [BlueOnyx:10825] Re: 5106R  login list

> Webmail (and other IMAP) and POP3 
> 
> Lew Berry, MCSE, MCT, CSSA 
> LCB Consulting Inc. 
> Systems Engineer 
> 450-106 State Road 13 N, #205 
> St Johns FL, 32259 
> LCBerry at LCBConsulting.net 
> (904) 482-1405 
> (904) 322-5049 fax 
> (904) 651-1046 cell 
> 
> ****** CONFIDENTIALITY NOTICE ****** 
> NOTICE: This e-mail message and all attachments transmitted with it may contain legally privileged and confidential information intended solely for the use of the addressee. If the reader of this message is not the intended recipient, you are hereby notified that any reading, dissemination, distribution, copying, or other use of this message or its attachments is strictly prohibited. If you have received this message in error, please notify the sender immediately and delete this message from your system. Thank you. 
> **************************************************************************** 
> 
> > -----Original Message----- 
> > From: blueonyx-bounces at mail.blueonyx.it [mailto:blueonyx- 
> > bounces at mail.blueonyx.it] On Behalf Of Richard Morgan 
> > Sent: Monday, June 18, 2012 12:06 PM 
> > To: BlueOnyx General Mailing List 
> > Subject: [BlueOnyx:10823] Re: 5106R login list 
> > 
> > Hi 
> > 
> > No, I disagree... it shows all the ftp sessions for all sites too.  If you need the 
> > last login for webmail, GUI, POP3, HTTP, etc, I can't imagine you'll find all this 
> > in one place.  What are you looking for? 
> > 
> > Richard 
> > ----- Original Message ----- 
> > From: "Lew Berry" <LCBerry at lcbconsulting.net> 
> > To: "BlueOnyx General Mailing List" <blueonyx at mail.blueonyx.it> 
> > Sent: Monday, June 18, 2012 4:37 PM 
> > Subject: [BlueOnyx:10822] Re: 5106R login list 
> > 
> > 
> > > Only generates for admin and reboot, anyway to generate for all users on 
> > > the box? 
> > > 
> > > Lew Berry, MCSE, MCT, CSSA 
> > > LCB Consulting Inc. 
> > > Systems Engineer 
> > > 450-106 State Road 13 N, #205 
> > > St Johns FL, 32259 
> > > LCBerry at LCBConsulting.net 
> > > (904) 482-1405 
> > > (904) 322-5049 fax 
> > > (904) 651-1046 cell 
> > > 
> > > ****** CONFIDENTIALITY NOTICE ****** 
> > > NOTICE: This e-mail message and all attachments transmitted with it may 
> > > contain legally privileged and confidential information intended solely 
> > > for the use of the addressee. If the reader of this message is not the 
> > > intended recipient, you are hereby notified that any reading, 
> > > dissemination, distribution, copying, or other use of this message or its 
> > > attachments is strictly prohibited. If you have received this message in 
> > > error, please notify the sender immediately and delete this message from 
> > > your system. Thank you. 
> > > 
> > ********************************************************** 
> > ****************** 
> > > 
> > > 
> > >> -----Original Message----- 
> > >> From: blueonyx-bounces at mail.blueonyx.it [mailto:blueonyx- 
> > >> bounces at mail.blueonyx.it] On Behalf Of Richard Barker 
> > >> Sent: Monday, June 18, 2012 11:07 AM 
> > >> To: blueonyx at mail.blueonyx.it 
> > >> Subject: [BlueOnyx:10820] Re: 5106R login list 
> > >> 
> > >> I do this and works great 
> > >> last > lastlog.txt 
> > >> 
> > >> RC 
> > >> 
> > >> -- 
> > >> +---------------------------------------------+ 
> > >>   Richard C. Barker Sr. 
> > >> 
> > >> +---------------------------------------------+ 
> > >> 
> > >> _______________________________________________ 
> > >> Blueonyx mailing list 
> > >> Blueonyx at mail.blueonyx.it 
> > >> http://mail.blueonyx.it/mailman/listinfo/blueonyx 
> > > 
> > > _______________________________________________ 
> > > Blueonyx mailing list 
> > > Blueonyx at mail.blueonyx.it 
> > > http://mail.blueonyx.it/mailman/listinfo/blueonyx 
> > 
> > _______________________________________________ 
> > Blueonyx mailing list 
> > Blueonyx at mail.blueonyx.it 
> > http://mail.blueonyx.it/mailman/listinfo/blueonyx 
> 
> _______________________________________________ 
> Blueonyx mailing list 
> Blueonyx at mail.blueonyx.it 
> http://mail.blueonyx.it/mailman/listinfo/blueonyx 
------- End of Original Message -------
 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.blueonyx.it/pipermail/blueonyx/attachments/20120618/f60accfe/attachment.html>