29 Oct
2008
29 Oct
'08
5:19 p.m.
On Wed, 2008-10-29 at 11:17 -0400, Albert E. Whale wrote:
Oct 29 09:43:34 192.168.50.5 dovecot: auth-worker(default): pam(darrin,217.168.145.51): pam_authenticate() failed: Authentication failure .. These attempts to authenticate Darrin will not complete, as this is not a valid user. The IP Address 217.168.145.51 was cycling through 1364 attempts. I would like to identify this type of activity sooner, as this is not a valid user.
OK, so you're using PAM. PAM doesn't tell Dovecot why the authentication failed. There are two possible solutions for your problem:
a) Look at PAM's own log (auth.log probably) instead. It probably tells the reason.
b) Don't use PAM.