Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read this important communication.

Bug 336534

Summary:	[server] Enable tracing of logins
Product:	[ECD] Orion	Reporter:	John Arthorne <john.arthorne>
Component:	Client	Assignee:	John Arthorne <john.arthorne>
Status:	RESOLVED FIXED	QA Contact:
Severity:	normal
Priority:	P3	CC:	Szymon.Brandys
Version:	0.2
Target Milestone:	0.2
Hardware:	PC
OS:	Windows 7
Whiteboard:

Description John Arthorne

2011-02-07 11:46:43 EST

We should have a way to trace successful and failed login attempts, for security/audit purposes.

Comment 1 John Arthorne

2011-02-07 12:09:53 EST

I have done this for form servlet (see FormAuthHelper#performAuthentication). However I don't see how to do this for OpenID login. Szymon, do you know a place where we can capture information that someone succeeded or failed to login using OpenID?

Comment 2 Szymon Brandys

2011-02-07 12:38:44 EST

OpenidConsumer#verifyResponse in org.eclipse.orion.server.authentication.openid.core

Comment 3 John Arthorne

2011-02-07 13:15:26 EST

Thanks Szymon. Released. The following logback.xml can be uncommented to log logins:

  <!-- <logger name="org.eclipse.orion.server.login" level="INFO"/> -->