Results 1 to 10 of 10

Thread: /opt/zimbra/conf/auditswatchrc.in removed in ZCS 7 OS ?

  1. #1
    Join Date
    Sep 2011
    Location
    France / Versailles
    Posts
    6
    Rep Power
    4

    Default /opt/zimbra/conf/auditswatchrc.in removed in ZCS 7 OS ?

    Hi,

    Today wished to look at the authentication failure watchdog... (available in ZCS 5 and 6 most likely)

    Even though some documentation is available and the scripts are in the ZCS FOSS 7.1.2 package, there's no /opt/zimbra/conf/auditswatchrc.in template anymore.

    Is this removed on purpose ? or just a miss ?

    If template could be pasted so we can recreate the missing file...

  2. #2
    Join Date
    Mar 2007
    Posts
    45
    Rep Power
    8

    Default

    I too would like to know what the status of this is? As far as I can tell I've configured the zmlocalconfig attributes correctly, but when I try to start it I get the same error as above.

  3. #3
    Join Date
    Nov 2009
    Location
    Ljubljana, Slovenia
    Posts
    268
    Rep Power
    5

    Default

    Any info on this subject appreciated.
    Missing both files:
    /opt/zimbra/conf/auditswatchrc
    /opt/zimbra/conf/auditswatchrc.in

    I see
    /opt/zimbra/conf/swatchrc
    /opt/zimbra/conf/swatchrc.in
    are both there, but those control Zimbra service, not auditing.

    Would really like to have audit watch available again.
    Zimbra on SGH dedicated hosting farm, Slovenia.
    In 2013 we announce new program of low cost SSL server certificates.

  4. #4
    Join Date
    Mar 2012
    Posts
    11
    Rep Power
    3

    Default

    Any status on this?

  5. #5
    Join Date
    Apr 2013
    Posts
    13
    Rep Power
    2

    Default

    Hi..
    I also need to know about this...
    any info on this, is it replace with something new?

    The error message when I try to run:
    Code:
    [root@mailzimbra ~]# su - zimbra
    [zimbra@mailzimbra ~]$ zmlocalconfig | grep zimbra_swatch*
    zimbra_swatch_notice_user = admin@??????.???
    [zimbra@mailzimbra ~]$ zmlocalconfig -e zimbra_swatch_ipacct_threshold=5
    [zimbra@mailzimbra ~]$ zmlocalconfig -e zimbra_swatch_acct_threshold=5
    [zimbra@mailzimbra ~]$ zmlocalconfig -e zimbra_swatch_ip_threshold=10
    [zimbra@mailzimbra ~]$ zmlocalconfig -e zimbra_swatch_total_threshold=60
    [zimbra@mailzimbra ~]$ zmlocalconfig -e zimbra_swatch_notice_user=60
    [zimbra@mailzimbra ~]$ zmauditswatchctl start
    /opt/zimbra/conf/auditswatchrc is missing.
    Starting auditswatch.../opt/zimbra/conf/auditswatchrc template not found.

    Using : Zimbra 7.2.4 OSE & Centos 6.4

  6. #6
    Join Date
    May 2007
    Location
    Zimbra
    Posts
    1,285
    Rep Power
    10

    Default

    This is actually a bug in the script. The file it is supposed to use is logswatchrc.
    Quanah Gibson-Mount
    Server Architect
    Zimbra, Inc
    --------------------
    Zimbra :: the leader in open source messaging and collaboration

  7. #7
    Join Date
    May 2007
    Location
    Zimbra
    Posts
    1,285
    Rep Power
    10

    Default

    Ugh, this is a total mess. I'll see what I can do to get this fixed in the next release.
    Quanah Gibson-Mount
    Server Architect
    Zimbra, Inc
    --------------------
    Zimbra :: the leader in open source messaging and collaboration

  8. #8
    Join Date
    May 2007
    Location
    Zimbra
    Posts
    1,285
    Rep Power
    10

    Default

    Ok, I believe you will find in /opt/zimbra/conf a file named logswatchrc.in. That should be renamed auditswatchrc.in, and then things should work. This is fixed for ZCS 7.2.5 and 8.0.5.
    Quanah Gibson-Mount
    Server Architect
    Zimbra, Inc
    --------------------
    Zimbra :: the leader in open source messaging and collaboration

  9. #9
    Join Date
    Apr 2013
    Posts
    13
    Rep Power
    2

    Default

    Quote Originally Posted by quanah View Post
    Ok, I believe you will find in /opt/zimbra/conf a file named logswatchrc.in. That should be renamed auditswatchrc.in, and then things should work. This is fixed for ZCS 7.2.5 and 8.0.5.
    Thanks you very much, it works now by renaming that file...

    but at first it shows :
    Code:
    # zmauditswatchctl start
    /opt/zimbra/conf/auditswatchrc is missing.
    Starting auditswatch...done.
    but when I stop it and start it again, the missing part error is no more and the auditswatchrc file is created automatically

    ..before that my previous post I mistakenly type :
    zimbra_swatch_notice_user = 60
    it should be the user email that get notified, so:

    Code:
    # zmlocalconfig -e zimbra_swatch_notice_user=mailadmin@????.com
    # zmlocalconfig | grep zimbra_swatch_notice
    zimbra_swatch_notice_user = mailadmin@????.com
    and testing with invalid login get emails like this:
    Subject : ABUSE: Account threshold exceeded: 192.168.2.87 user@????.com


    Thanks..

  10. #10
    Join Date
    May 2007
    Location
    Zimbra
    Posts
    1,285
    Rep Power
    10

    Default

    Yeah, I think that line is annoying. If it isn't present, it creates it for you. Don't know why it bothers to print out that it is missing the first time it starts up.
    Quanah Gibson-Mount
    Server Architect
    Zimbra, Inc
    --------------------
    Zimbra :: the leader in open source messaging and collaboration

Similar Threads

  1. ZCS OS Ed. v4.5.10
    By ladlaurel in forum Installation
    Replies: 1
    Last Post: 10-14-2010, 10:51 PM
  2. Trouble Sending mail - All Messages deferred!
    By SiteDiscovery in forum Administrators
    Replies: 7
    Last Post: 09-03-2009, 04:52 AM
  3. zcs open source will not install on os x 10.4.11
    By comptekki in forum Installation
    Replies: 6
    Last Post: 01-16-2008, 10:18 AM
  4. Replies: 41
    Last Post: 10-29-2007, 02:36 PM
  5. ZCS 3.2 Beta Available
    By KevinH in forum Announcements
    Replies: 31
    Last Post: 07-07-2006, 03:46 PM

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •