exim / dovecot show password

[plesk4lyf]

Hi Guys,

Does anyone know how to enable password logging for dovecot and exim?

I tried showing passwords by setting in /etc/dovecot/dovecot.conf

auth_debug = yes
auth_debug_passwords = yes

However it still wasn't showing passwords.

There are times when troubleshooting where it would be greatly helpful to see what email clients are submitting.

 

[cPanelMichael]

Hello @plesk4lyf,

Note: The following instructions expose email account passwords in /var/log/maillog. This is not recommended for production servers due to the security implications of such a change.

I tested this on a system running cPanel & WHM version 76 and confirmed the bad password was successfully logged to /var/log/maillog:

Jan  9 11:36:05 76stable dovecot: auth-worker(16158): Debug: dict([email protected],1.2.3.4,<a4B/6Ql/kOoKEhWf>): CRYPT(badpassword123) != '$1$Wbzt3RNe$cd1tbIdABcWN8YNGAFlCx1'

You will need to use the instructions documented on the link below to make changes to the Dovecot configuration as opposed to directly editing the /etc/dovecot/dovecot.conf file:

Mailserver Configuration - Version 76 Documentation - cPanel Documentation

Let me know if using the supported method of modifying the Dovecot configuration helps.

Thank you.