Re: log failed plaintext password for specific user only

2022-03-25 Thread mj
Hi, Thank you both for the additional suggestions! MJ

Re: log failed plaintext password for specific user only

2022-03-23 Thread Plutocrat
On 23/03/2022 19.30, mj wrote: Op 23-03-2022 om 12:29 schreef Aki Tuomi: 1. Try hashing possible password candidates and compare 2. Temporarily log everyone's passwords and then sanitize logs after you're done. No way to enable that option for a single user. While there is no way to enabl

Re: log failed plaintext password for specific user only

2022-03-23 Thread Joseph Tam
On Wed, 23 Mar 2022, mj wrote: We are currently observing a high number of failed authentications for a specific user, coming from *many* diffirent IPs across the globe, with most IPs only trying once or twice, making this difficult to block. The number of failed authentications cause this acc

Re: log failed plaintext password for specific user only

2022-03-23 Thread mj
Op 23-03-2022 om 12:29 schreef Aki Tuomi: 1. Try hashing possible password candidates and compare 2. Temporarily log everyone's passwords and then sanitize logs after you're done. No way to enable that option for a single user. Thank you! I will follow your advise.

Re: log failed plaintext password for specific user only

2022-03-23 Thread Aki Tuomi
> On 23/03/2022 12:18 mj wrote: > > > Op 23-03-2022 om 11:11 schreef Aki Tuomi: > > > > Well, is the sha1 value same every time? If it is, then they are trying > > same password each time. > > > > Aki > > Yes, understood. :-) > > The SHA1 changes, but each SHA1 is tried multiple times. >

Re: log failed plaintext password for specific user only

2022-03-23 Thread mj
Op 23-03-2022 om 11:11 schreef Aki Tuomi: Well, is the sha1 value same every time? If it is, then they are trying same password each time. Aki Yes, understood. :-) The SHA1 changes, but each SHA1 is tried multiple times. The question is: can we find out, just for this specific user, WHA

Re: log failed plaintext password for specific user only

2022-03-23 Thread Aki Tuomi
> On 23/03/2022 11:47 mj wrote: > > > Hi, > > We are logging failed authentication attempts, with the attempted > password as auth_verbose_passwords=sha1 > > The question: is it possible to configure auth_verbose_passwords=plain > for a specific user only? Turning it on globally would be

log failed plaintext password for specific user only

2022-03-23 Thread mj
Hi, We are logging failed authentication attempts, with the attempted password as auth_verbose_passwords=sha1 The question: is it possible to configure auth_verbose_passwords=plain for a specific user only? Turning it on globally would be too much sensitive information for the purpose. Rea