How to log failed logins?

[Cantor, Scott]

On 1/27/16, 7:48 PM, "users on behalf of Brent Putman" <users-bounces at shibboleth.net on behalf of putmanb at georgetown.edu> wrote:


>
>Barring that, I can't see that we have any generalized output from the authN subsystem that we could just bump up.

I was referring to the servlet, basically, that's the same output I have on INFO in the new UsernamePassword actions.

>If there's existing centralized DEBUG output I'm missing, I'll bump it up, but if it's distributed across all the different login handler impls, that's probably not as do-able.

Oh, it is. There's nothing in the authn layer, because failure isn't always something you continue after.

>Don't have the beginning of this thread, but not sure how we even would deal with several cases: 1) the RemoteUser- and ExternalAuthnSystem- ones, those logs would happen in the external thing anyway 2) PreviousSession, would we want output from that 3) IPAddress-,
> the principal is the same so presumably would want the IP address.

Right. That's why I kept saying it's really up to the login pieces themselves in most cases.

>But if all we really care about is the JAAS UsernamePassword- output like my example above, then if people want that bumped to INFO, that's easy enough.

I think that alone would be parity with the new version.

-- Scott