[Dovecot] Log successful login plain text password

[wkaha at yahoo.com]

Hi Marco

when running dovecot -a you will find 
auth_*

I think you could you auth_verbose_passwords to fit your needs.

all the best




On 28.08.2013, at 08:57, Marco Fretz wrote:

> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Hi everyone,
> 
> I want to use dovecot as a IMAP and POP3 proxy in front of our current
> E-Mail hosting server to log the plain text passwords of all successful
> logins for migration reasons. Actually I don't need the password to see
> in plain text, storing them as SHA256-CRYPT (or something dovecot can
> use later for auth) hash in a file or DB would be fine, too.
> 
> I need this for the migration from the current mail server (using
> proprietary hashing to store passwords) to a new postfix / dovecot base
> mail system.
> 
> I played around with "auth_debug_passwords" and all debug / logging
> options I found in the manual. Nothing logs successful login plaintext
> passwords.
> 
> Any hint welcome.
> 
> Thanks a lot,
> Marco
> 
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.13 (GNU/Linux)
> Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
> 
> iQIcBAEBAgAGBQJSHZ9tAAoJEKxm7Ju3UATui2cP/A3cf2TrNvOjjtP1TCgZZ5EC
> igsgngPlKiXU/RwHO9shBLXUyhKDHPGihNf9KL/RjoFnrgX1asPd/RF/2b080IU3
> bNO49BLs8QqoroKz5E+TL8UNixlO5YQjnerKfJ5GIJbSUTC3MaxmN62Cl9jEaTWu
> 4dX3MXoB3ghoxt6FETSLXz6cEXsGd6KvqxolQC13NYtvpZED+qk7z3RywK8Xp/Au
> Ipx3xEnDRc/YvG3PeJlsjF9Ge80GxVVH0nudNOV/zmyuNfh4PkPRerk1R4Px01zI
> sxnXvcNjjenCJ6DMKBmOCyBii9Wl9i4opw9k4X4Z6MFEZGiodRz1usKWJMT0VqUG
> NBEJDOWsoWpasWMCtduBRrNQS3JI+o1tebDAI5n3K4lJ2d27+nosDvdQ8vNlVszM
> 8nhSn228RQNy9SJZNAvspOYQBM2gt5IQyWGA4jhrMUkwKeTfHZik8vh8lEcwbK9q
> H6Myue+i+G8wVa57F1V7/7x2LNGn56BWxTDlBrtKdK3KphCgEoCny/f5VYerO8It
> MnCMLPXI2oCC8qqkK7x45SYSe/eQhgV93LHpI5z25TqyeJ6R+7dglderRDQcNN0n
> OtbYMYkqlF8xJ4k+rVFwOC5VD7Bq+S2Q4LyLEf7wFH32Dc12pI/SnAL8DPvkNgbL
> FshgaVOXUEkb0WhnvROl
> =oEzx
> -----END PGP SIGNATURE-----
>