Mark and Alex, > On Aug 18, 2018, at 05:46, Mark Thomas <ma...@apache.org> wrote: > >> On 18/08/18 10:36, Olaf Kock wrote: >> >>> On 18.08.2018 03:58, Alex O'Ree wrote: >>> Is it possible to configure the user lockout realm to log what ip address >>> the failed login attempt came from? I know the information needed will >>> also >>> be in the access log but added it to the "attempt to login from a locked >>> account" message would be super helpful. Would it be more advisable to >>> extend the existing lockout realm and modify the log statements myself? >> Looking at the source here: >> https://github.com/apache/tomcat/blob/trunk/java/org/apache/catalina/realm/LockOutRealm.java#L216 >> and here: >> https://github.com/apache/tomcat/blob/trunk/java/org/apache/catalina/realm/LocalStrings.properties#L91, >> you can't configure it. But the realm is simple and you can roll your own. >> >> Is it advisable? If you want that information in this log message: It >> might be your only option. You'll have to decide how intensely you'd >> like to have it. > > You need this too: > https://bz.apache.org/bugzilla/show_bug.cgi?id=59750
I still fully intend to flesh this out. Gotta finish a big project at $work first though. -chris --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
