Interesting Patrick, thanks for that. I have the audit log going but I
don't see any failed authentication calls. Odd.

Tom

On Wed, Oct 12, 2016 at 1:59 PM, Patrick Gardella <
[email protected]> wrote:

> Do you mean you just want to log that the login failed for a user? Not to
> print the password itself they used?
>
> You can do this in your log4j2.xml (depending on your CAS version - I'm
> using 4.2.6) by adding something like this in the Appenders section:
>
>         <RollingFile name="auditlogfile" fileName="logs/cas_audit.log"
> append="true"
>                      filePattern="logs/cas_audit-%
> d{yyyy-MM-dd}-%i.log.gz">
>             <PatternLayout pattern="%d %p [%c] - %m%n"/>
>             <Policies>
>                 <OnStartupTriggeringPolicy />
>                 <SizeBasedTriggeringPolicy size="10 MB"/>
>                 <TimeBasedTriggeringPolicy />
>             </Policies>
>         </RollingFile>
>
> and this in the Loggers section:
>
>         <AsyncLogger name="org.jasig.inspektr.audit.support" level="info"
> includeLocation="true">
>             <AppenderRef ref="auditlogfile"/>
>         </AsyncLogger>
>
> This should print failures:
> 2016-10-12 00:02:04,455 INFO 
> [org.jasig.inspektr.audit.support.Slf4jLoggingAuditTrailManager]
> - Audit trail record BEGIN
> =============================================================
> WHO: johnsmith
> WHAT: Supplied credentials: [johnsmith]
> ACTION: AUTHENTICATION_FAILED
> APPLICATION: CAS
> WHEN: Wed Oct 12 00:02:04 UTC 2016
> CLIENT IP ADDRESS: 192.168.1.1.
> SERVER IP ADDRESS: 192.168.25.10
> =============================================================
>
> Patrick+
>
> On Tue, Oct 11, 2016 at 5:02 PM, Tom Barber <[email protected]>
> wrote:
>
>> Hello folks,
>>
>> I've grepped around but can't find anything so far.
>>
>> Can you log failed authentication attempts? Simply stuff like when a
>> users password is incorrect.
>>
>> Thanks
>>
>> Tom
>>
>> --
>> CAS gitter chatroom: https://gitter.im/apereo/cas
>> CAS mailing list guidelines: https://apereo.github.io/cas/M
>> ailing-Lists.html
>> CAS documentation website: https://apereo.github.io/cas
>> CAS project website: https://github.com/apereo/cas
>> ---
>> You received this message because you are subscribed to the Google Groups
>> "CAS Community" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to [email protected].
>> To post to this group, send email to [email protected].
>> Visit this group at https://groups.google.com/a/ap
>> ereo.org/group/cas-user/.
>> To view this discussion on the web visit https://groups.google.com/a/ap
>> ereo.org/d/msgid/cas-user/CABML50cNX-DNnQ0NhPLKPuBAF8H%2B0U3
>> XQNrC8FjX5Nbrzpn6Pw%40mail.gmail.com
>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/CABML50cNX-DNnQ0NhPLKPuBAF8H%2B0U3XQNrC8FjX5Nbrzpn6Pw%40mail.gmail.com?utm_medium=email&utm_source=footer>
>> .
>> For more options, visit https://groups.google.com/a/apereo.org/d/optout.
>>
>
>

-- 
CAS gitter chatroom: https://gitter.im/apereo/cas
CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html
CAS documentation website: https://apereo.github.io/cas
CAS project website: https://github.com/apereo/cas
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CABML50fS6uYCS6tKd6oM2OjDvcP%2BkMrUYvzm%3DpycqY9oiz-NFA%40mail.gmail.com.
For more options, visit https://groups.google.com/a/apereo.org/d/optout.

Reply via email to