logging failed auth attempts

[Tom Kinghorn]

  Good morning.

Firstly, please forgive me for posting here.
I am new to Cyrus and have tried google, with no luck.

I have inherited a SLES 11 server with postix & amavisd-new.

The logs are full of LOGIN failures but it does not show the username 
which failed.

postfix/smtpd[11881]: warning: unknown[41.145.221.103]: SASL LOGIN 
authentication failed: authentication failure

Is it possible to do this?

I would like to see the failed username in order to act on accounts 
which have been compromised.

Thanks in advance

Tom
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.andrew.cmu.edu/pipermail/cyrus-sasl/attachments/20101207/23c14fc9/attachment.html