Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-2131

Log user names of failed login attempts

XMLWordPrintable

    • Icon: Improvement Improvement
    • Resolution: Unresolved
    • Icon: Major Major
    • core, ldap-plugin
    • None
    • Platform: All, OS: All

      Hello,

      It would be helpful to have the user name of a failed login attempt output to
      the Hudson log. This way, we can see if someone is trying to use various user
      names to login (unsuccessfully) to a Hudson instance.

      Currently, the log only shows:
      INFO: Login attempt failed
      ...

      I would like something like this:
      INFO: Login attempt failed for user "imahacker"
      ...

      Thanks & Regards,
      Andrew

        1. AuthenticationProcessingFilter2.java
          3 kB

          [JENKINS-2131] Log user names of failed login attempts

          awalters created issue -

          awalters added a comment -

          Created an attachment (id=341)
          Modified line 61

          awalters added a comment - Created an attachment (id=341) Modified line 61

          Oleg Nenashev added a comment -

          A case for audit trail plugin

          Oleg Nenashev added a comment - A case for audit trail plugin
          Oleg Nenashev made changes -
          Component/s New: audit-trail [ 15599 ]
          Component/s Original: security [ 15508 ]

          Daniel Beck added a comment -

          Oleg it'd be much more helpful if you checked whether issues are actually still valid (instead of just changing a bit of metadata).

          Which this one isn't.

          Daniel Beck added a comment - Oleg it'd be much more helpful if you checked whether issues are actually still valid (instead of just changing a bit of metadata). Which this one isn't.
          Daniel Beck made changes -
          Component/s New: core [ 15593 ]
          Component/s Original: audit-trail [ 15599 ]

          Daniel Beck added a comment -

          Fixed in the mean time by logging jenkins.security.SecurityListener:

          Oct 08, 2014 7:42:44 PM FINE jenkins.security.SecurityListener
          failed to authenticate: baduser
          Oct 08, 2014 7:42:44 PM FINE jenkins.security.SecurityListener
          failed to log in: baduser

          Daniel Beck added a comment - Fixed in the mean time by logging jenkins.security.SecurityListener: Oct 08, 2014 7:42:44 PM FINE jenkins.security.SecurityListener failed to authenticate: baduser Oct 08, 2014 7:42:44 PM FINE jenkins.security.SecurityListener failed to log in: baduser
          Daniel Beck made changes -
          Resolution New: Fixed [ 1 ]
          Status Original: Open [ 1 ] New: Resolved [ 5 ]

          Oleg Nenashev added a comment -

          Hmm... I have checked it, but seems the log level was not fine enough.
          My bad,, I should inspect the code next time

          Oleg Nenashev added a comment - Hmm... I have checked it, but seems the log level was not fine enough. My bad,, I should inspect the code next time

          Daniel Beck added a comment -

          Okay, I can only see what you change in the end, so it looked like robot work and not searching. Sorry about that.

          Daniel Beck added a comment - Okay, I can only see what you change in the end, so it looked like robot work and not searching. Sorry about that.

            Unassigned Unassigned
            awalters awalters
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated: