On 18.08.2018 03:58, Alex O'Ree wrote:
Is it possible to configure the user lockout realm to log what ip address
the failed login attempt came from? I know the information needed will also
be in the access log but added it to the "attempt to login from a locked
account" message would be super helpful. Would it be more advisable to
extend the existing lockout realm and modify the log statements myself?
Looking at the source here:
https://github.com/apache/tomcat/blob/trunk/java/org/apache/catalina/realm/LockOutRealm.java#L216
and here:
https://github.com/apache/tomcat/blob/trunk/java/org/apache/catalina/realm/LocalStrings.properties#L91,
you can't configure it. But the realm is simple and you can roll your own.
Is it advisable? If you want that information in this log message: It
might be your only option. You'll have to decide how intensely you'd
like to have it.
Olaf
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
