A Zimbra extension that allows the user to monitor their recent login and account activity. This is important to keep the user’s account safe.

Supported Zimbra version 8.8.15.

Bugs and feedback: https://github.com/Zimbra-Community/account-history/issues

========================================================================

Installing

Use the automated installer:

wget --no-cache https://github.com/Zimbra-Community/account-history/raw/master/account-history-installer.sh -O /tmp/account-history-installer.sh
chmod +rx /tmp/account-history-installer.sh
/tmp/account-history-installer.sh

========================================================================

Screenshot of Client Zimlet

Screenshot of Admin Zimlet and extension

========================================================================

Log external ip

If you only see internal IP’s in the account history, you need to configure Zimbra to log the IP from the X-Forwarded-For header. https://wiki.zimbra.com/wiki/Log_Files#Logging_the_Originating_IP

zmlocalconfig zimbra_http_originating_ip_header
zimbra_http_originating_ip_header = X-Forwarded-For

zmprov mcf +zimbraMailTrustedIP 127.0.0.1
zmprov mcf +zimbraMailTrustedIP <proxy ip here>
zmprov mcf +zimbraMailTrustedIP <more proxy here>

GeoIP database

The GeoIP database has A LOT of rate limiting nowadays, so check if yours was initialized by running:

/usr/local/sbin/geoip2-zimbra-update.sh

Configuring preferences

Support a semi-colon separated list of log files, only the audit.og log4j format is supported.

nano /opt/zimbra/lib/ext/accountHistory/config.properties
audit_logs=/opt/zimbra/log/audit.log;/opt/zimbra/log/sync.log

You can also have the extension read gzipped files (after log rotation), for now, it only reads yesterdays gz log.

nano /opt/zimbra/lib/ext/accountHistory/config.properties
audit_logs=/opt/zimbra/log/audit.log;/opt/zimbra/log/audit.log.yyyy-MM-dd.gz

Un-installing

rm -Rf /opt/zimbra/lib/ext/accountHistory
rm -Rf /opt/zimbra/lib/ext/AccountHistoryAdmin 
rm -Rf /opt/zimbra/zimlets-deployed/_dev/tk_barrydegraaff_account_history
su - zimbra -c "zmzimletctl undeploy tk_barrydegraaff_accounthistory_admin"
[zimbra@server zimbra]$ zmmailboxdctl restart 

========================================================================

A Zeta Alliance Zimlet https://zetalliance.org

SOurce : https://github.com/Zimbra-Community/account-history