Interesting Patrick, thanks for that. I have the audit log going but I don't see any failed authentication calls. Odd.
Tom On Wed, Oct 12, 2016 at 1:59 PM, Patrick Gardella < [email protected]> wrote: > Do you mean you just want to log that the login failed for a user? Not to > print the password itself they used? > > You can do this in your log4j2.xml (depending on your CAS version - I'm > using 4.2.6) by adding something like this in the Appenders section: > > <RollingFile name="auditlogfile" fileName="logs/cas_audit.log" > append="true" > filePattern="logs/cas_audit-% > d{yyyy-MM-dd}-%i.log.gz"> > <PatternLayout pattern="%d %p [%c] - %m%n"/> > <Policies> > <OnStartupTriggeringPolicy /> > <SizeBasedTriggeringPolicy size="10 MB"/> > <TimeBasedTriggeringPolicy /> > </Policies> > </RollingFile> > > and this in the Loggers section: > > <AsyncLogger name="org.jasig.inspektr.audit.support" level="info" > includeLocation="true"> > <AppenderRef ref="auditlogfile"/> > </AsyncLogger> > > This should print failures: > 2016-10-12 00:02:04,455 INFO > [org.jasig.inspektr.audit.support.Slf4jLoggingAuditTrailManager] > - Audit trail record BEGIN > ============================================================= > WHO: johnsmith > WHAT: Supplied credentials: [johnsmith] > ACTION: AUTHENTICATION_FAILED > APPLICATION: CAS > WHEN: Wed Oct 12 00:02:04 UTC 2016 > CLIENT IP ADDRESS: 192.168.1.1. > SERVER IP ADDRESS: 192.168.25.10 > ============================================================= > > Patrick+ > > On Tue, Oct 11, 2016 at 5:02 PM, Tom Barber <[email protected]> > wrote: > >> Hello folks, >> >> I've grepped around but can't find anything so far. >> >> Can you log failed authentication attempts? Simply stuff like when a >> users password is incorrect. >> >> Thanks >> >> Tom >> >> -- >> CAS gitter chatroom: https://gitter.im/apereo/cas >> CAS mailing list guidelines: https://apereo.github.io/cas/M >> ailing-Lists.html >> CAS documentation website: https://apereo.github.io/cas >> CAS project website: https://github.com/apereo/cas >> --- >> You received this message because you are subscribed to the Google Groups >> "CAS Community" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> To post to this group, send email to [email protected]. >> Visit this group at https://groups.google.com/a/ap >> ereo.org/group/cas-user/. >> To view this discussion on the web visit https://groups.google.com/a/ap >> ereo.org/d/msgid/cas-user/CABML50cNX-DNnQ0NhPLKPuBAF8H%2B0U3 >> XQNrC8FjX5Nbrzpn6Pw%40mail.gmail.com >> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/CABML50cNX-DNnQ0NhPLKPuBAF8H%2B0U3XQNrC8FjX5Nbrzpn6Pw%40mail.gmail.com?utm_medium=email&utm_source=footer> >> . >> For more options, visit https://groups.google.com/a/apereo.org/d/optout. >> > > -- CAS gitter chatroom: https://gitter.im/apereo/cas CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html CAS documentation website: https://apereo.github.io/cas CAS project website: https://github.com/apereo/cas --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CABML50fS6uYCS6tKd6oM2OjDvcP%2BkMrUYvzm%3DpycqY9oiz-NFA%40mail.gmail.com. For more options, visit https://groups.google.com/a/apereo.org/d/optout.
