On 18/08/18 10:36, Olaf Kock wrote: > > On 18.08.2018 03:58, Alex O'Ree wrote: >> Is it possible to configure the user lockout realm to log what ip address >> the failed login attempt came from? I know the information needed will >> also >> be in the access log but added it to the "attempt to login from a locked >> account" message would be super helpful. Would it be more advisable to >> extend the existing lockout realm and modify the log statements myself? > Looking at the source here: > https://github.com/apache/tomcat/blob/trunk/java/org/apache/catalina/realm/LockOutRealm.java#L216 > and here: > https://github.com/apache/tomcat/blob/trunk/java/org/apache/catalina/realm/LocalStrings.properties#L91, > you can't configure it. But the realm is simple and you can roll your own. > > Is it advisable? If you want that information in this log message: It > might be your only option. You'll have to decide how intensely you'd > like to have it.
You need this too: https://bz.apache.org/bugzilla/show_bug.cgi?id=59750 Mark --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
