Skip to content

Zimbra-Community/account-history

Repository files navigation

Zimbra Recent Account Activity

A Zimbra extension that allows the user to monitor their recent login and account activity. This is important to keep the user's account safe.

Supported Zimbra version 8.8.15.

Bugs and feedback: https://github.com/Zimbra-Community/account-history/issues

========================================================================

Installing

Use the automated installer:

wget --no-cache https://github.com/Zimbra-Community/account-history/raw/master/account-history-installer.sh -O /tmp/account-history-installer.sh
chmod +rx /tmp/account-history-installer.sh
/tmp/account-history-installer.sh

========================================================================

Screenshot of Client Zimlet

alt tag

Screenshot of Admin Zimlet and extension

alt tag

========================================================================

Log external ip

If you only see internal IP's in the account history, you need to configure Zimbra to log the IP from the X-Forwarded-For header. https://wiki.zimbra.com/wiki/Log_Files#Logging_the_Originating_IP

zmlocalconfig zimbra_http_originating_ip_header
zimbra_http_originating_ip_header = X-Forwarded-For

zmprov mcf +zimbraMailTrustedIP 127.0.0.1
zmprov mcf +zimbraMailTrustedIP <proxy ip here>
zmprov mcf +zimbraMailTrustedIP <more proxy here>

GeoIP database

The GeoIP database has A LOT of rate limiting nowadays, so check if yours was initialized by running:

/usr/local/sbin/geoip2-zimbra-update.sh

Configuring preferences

Support a semi-colon separated list of log files, only the audit.og log4j format is supported.

nano /opt/zimbra/lib/ext/accountHistory/config.properties
audit_logs=/opt/zimbra/log/audit.log;/opt/zimbra/log/sync.log

You can also have the extension read gzipped files (after log rotation), for now, it only reads yesterdays gz log.

nano /opt/zimbra/lib/ext/accountHistory/config.properties
audit_logs=/opt/zimbra/log/audit.log;/opt/zimbra/log/audit.log.yyyy-MM-dd.gz

Un-installing

rm -Rf /opt/zimbra/lib/ext/accountHistory
rm -Rf /opt/zimbra/lib/ext/AccountHistoryAdmin 
rm -Rf /opt/zimbra/zimlets-deployed/_dev/tk_barrydegraaff_account_history
su - zimbra -c "zmzimletctl undeploy tk_barrydegraaff_accounthistory_admin"
[zimbra@server zimbra]$ zmmailboxdctl restart 

========================================================================

A Zeta Alliance Zimlet https://zetalliance.org

About

A Zimbra extension that allows the user to monitor their recent login and account activity. This is important to keep the user's account safe.

Resources

License

Stars

Watchers

Forks

Packages

No packages published