Project

General

Profile

Actions

Bug #10259

closed

Log for failed login attempt is not (correctly) reported

Added by François ARMAND about 7 years ago. Updated almost 5 years ago.

Status:
Released
Priority:
1
Category:
System integration
Target version:
Severity:
UX impact:
User visibility:
Effort required:
Priority:
0
Name check:
Fix check:
Regression:

Description

We don't have a WARN, synthetic log line when a people tried to log in and failed.

Proposed format:

//form login
[2017-02-22 23:18:15] WARN  application - Login authentication failed for user 'admin' from IP '0:0:0:0:0:0:0:1': Bad credentials

//rest
[2017-02-22 23:20:41] WARN  application - REST authentication failed from IP '0:0:0:0:0:0:0:1|Proxy-Client-IP:yeah-anything-can-go-here': No registered token 'xxxxx'
Actions

Also available in: Atom PDF