Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read this important communication.
Bug 336534 - [server] Enable tracing of logins
Summary: [server] Enable tracing of logins
Status: RESOLVED FIXED
Alias: None
Product: Orion
Classification: ECD
Component: Client (show other bugs)
Version: 0.2   Edit
Hardware: PC Windows 7
: P3 normal (vote)
Target Milestone: 0.2   Edit
Assignee: John Arthorne CLA
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-02-07 11:46 EST by John Arthorne CLA
Modified: 2011-09-01 11:41 EDT (History)
1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description John Arthorne CLA 2011-02-07 11:46:43 EST 
We should have a way to trace successful and failed login attempts, for security/audit purposes.
Comment 1 John Arthorne CLA 2011-02-07 12:09:53 EST 
I have done this for form servlet (see FormAuthHelper#performAuthentication). However I don't see how to do this for OpenID login. Szymon, do you know a place where we can capture information that someone succeeded or failed to login using OpenID?
Comment 2 Szymon Brandys CLA 2011-02-07 12:38:44 EST 
OpenidConsumer#verifyResponse in org.eclipse.orion.server.authentication.openid.core
Comment 3 John Arthorne CLA 2011-02-07 13:15:26 EST 
Thanks Szymon. Released. The following logback.xml can be uncommented to log logins:

  <!-- <logger name="org.eclipse.orion.server.login" level="INFO"/> -->