ref: refs/heads/master commit f5d99fc2558d284b10f286dd93b943743157b76c Author: Josef Reidinger Date: Mon Nov 2 16:53:09 2009 +0100 log each login which failed --- webservice/app/controllers/sessions_controller.rb | 1 + webservice/package/yast2-webservice.changes | 5 +++++ 2 files changed, 6 insertions(+), 0 deletions(-) diff --git a/webservice/app/controllers/sessions_controller.rb b/webservice/app/controllers/sessions_controller.rb index d88f3e0..9b16cd9 100644 --- a/webservice/app/controllers/sessions_controller.rb +++ b/webservice/app/controllers/sessions_controller.rb @@ -46,6 +46,7 @@ class SessionsController < ApplicationController @cmd_ret["login"] = "granted" @cmd_ret["auth_token"] = { :value => self.current_account.remember_token , :expires => self.current_account.remember_token_expires_at } else + logger.warn "Login failed from ip #{request.remote_ip} with user #{params[:login] ||""}" @cmd_ret["login"] = "denied" BruteForceProtection.instance.fail_attempt end diff --git a/webservice/package/yast2-webservice.changes b/webservice/package/yast2-webservice.changes index 386731c..5fa067f 100644 --- a/webservice/package/yast2-webservice.changes +++ b/webservice/package/yast2-webservice.changes @@ -1,4 +1,9 @@ ------------------------------------------------------------------- +Mon Nov 2 16:52:08 CET 2009 - jreidinger@suse.cz + +- log all failed login (user and its ip) (bnc#550377) + +------------------------------------------------------------------- Mon Nov 2 16:12:32 CET 2009 - jreidinger@suse.cz - add brute force attack protection (bnc#550377) -- To unsubscribe, e-mail: yast-commit+unsubscribe@opensuse.org For additional commands, e-mail: yast-commit+help@opensuse.org