exim / dovecot show password

plesk4lyf

Active Member
PartnerNOC
May 21, 2018
33
4
8
Sydney
cPanel Access Level
Root Administrator
Hi Guys,

Does anyone know how to enable password logging for dovecot and exim?

I tried showing passwords by setting in /etc/dovecot/dovecot.conf

auth_debug = yes
auth_debug_passwords = yes

However it still wasn't showing passwords.

There are times when troubleshooting where it would be greatly helpful to see what email clients are submitting.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,904
2,218
463
Hello @plesk4lyf,

Note: The following instructions expose email account passwords in /var/log/maillog. This is not recommended for production servers due to the security implications of such a change.

I tested this on a system running cPanel & WHM version 76 and confirmed the bad password was successfully logged to /var/log/maillog:

Code:
Jan  9 11:36:05 76stable dovecot: auth-worker(16158): Debug: dict([email protected],1.2.3.4,<a4B/6Ql/kOoKEhWf>): CRYPT(badpassword123) != '$1$Wbzt3RNe$cd1tbIdABcWN8YNGAFlCx1'
You will need to use the instructions documented on the link below to make changes to the Dovecot configuration as opposed to directly editing the /etc/dovecot/dovecot.conf file:

Mailserver Configuration - Version 76 Documentation - cPanel Documentation

Let me know if using the supported method of modifying the Dovecot configuration helps.

Thank you.