[ 
https://issues.apache.org/jira/browse/KNOX-534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14514221#comment-14514221
 ] 

Sumit Gupta commented on KNOX-534:
----------------------------------

Audit log for an authentication error now looks like this:

{code}
15/04/27 10:34:07 
||42d0460a-a43e-4914-a989-d868b0547082|audit|WEBHDFS||||authentication|principal|foo|failure|LDAP
 authentication failed.
{code}

This is for a request made for user 'foo' that doesn't exist in the directory.

e.g. 
{code}
curl -iku foo:guest-password -X GET 
'https://localhost:8443/gateway/sandbox/webhdfs/v1/?op=GETHOMEDIRECTORY'
{code}


> Audit log for failed authentication attempts
> --------------------------------------------
>
>                 Key: KNOX-534
>                 URL: https://issues.apache.org/jira/browse/KNOX-534
>             Project: Apache Knox
>          Issue Type: Bug
>          Components: Server
>    Affects Versions: 0.6.0, 0.7.0
>            Reporter: Sumit Gupta
>            Assignee: Sumit Gupta
>             Fix For: 0.6.0, 0.7.0
>
>
> The Shiro provider doesn't currently audit any failed authentication attempts 
> when a user not found in the directory.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to