Project

General

Profile

Actions

Bug #1899

closed

Authentification Fails aren't logged

Added by Nicolas PERRON over 12 years ago. Updated over 12 years ago.

Status:
Released
Priority:
3
Category:
Web - UI & UX
Target version:
Severity:
UX impact:
User visibility:
Effort required:
Priority:
Name check:
Fix check:
Regression:

Description

Right Login + Right Password = Log
Right Login + Wrong Password = No log
Wrong Login = No log

Actions #1

Updated by Jonathan CLARKE over 12 years ago

  • Target version changed from 23 to 2.3.0
Actions #2

Updated by Jonathan CLARKE over 12 years ago

  • Assignee set to François ARMAND
Actions #3

Updated by François ARMAND over 12 years ago

  • Status changed from New to Discussion

I'm able to (rather) easely log bad credentials events, but not bad login one. That would imply a completely different log logic (adding some filter to spring security), and we really don't want to do that now.

So, I propose to don't do anything for now, and make the modification for 2.4.

Actions #4

Updated by François ARMAND over 12 years ago

  • Status changed from Discussion to Pending technical review
  • % Done changed from 0 to 100
Actions #5

Updated by Jonathan CLARKE over 12 years ago

  • Status changed from Pending technical review to Released
Actions

Also available in: Atom PDF