I'd like to write a custom subclass of the included database JAAS login module.
I want to log the timestamp and IP address of the user attempting to log in.
Maybe lock out the IP address for certain amount of time if the login fails more than 3 times, etc.
What should I need to change in JBoss' JAAS implementation, and JBossWeb, to support this scenario?
Thanks in advance,
Ricardo Argüello
Scott M Stark wrote:
This information is logged at trace level by the realm. You would need to either
use a custom subclass of the JAAS login module currently used to log this, or add a new login module that logged the username if its abort method was called to indicate the login did not succeed and chain this will the login module doing the authentication.
------------------------------------------------------- This SF.Net email sponsored by: Parasoft Error proof Web apps, automate testing & more. Download & eval WebKing and get a free book. www.parasoft.com/bulletproofapps _______________________________________________ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
