[Tickets #12456] Re: Logging of failed login attempts

[noreply at bugs.horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/12456
------------------------------------------------------------------------------
  Ticket             | 12456
  Updated By         | mdop at seznam.cz <mdop at seznam.cz>
  Summary            | Logging of failed login attempts
  Queue              | Synchronization
  Version            | Git master
  Type               | Enhancement
  State              | New
  Priority           | 1. Low
  Milestone          |
  Patch              |
  Owners             |
------------------------------------------------------------------------------


mdop at seznam.cz (2013-07-13 20:10) wrote:

Login attempts to Horde through web interface are visible in Error log:

2013-07-13T14:32:39+00:00 DEBUG: HORDE [horde] SQL  (0.0003s)
	SELECT * FROM horde_users WHERE user_uid = 'caligula' [pid 1693 on  
line 558 of "/usr/share/pear/Horde/Db/Adapter/Base.php"]
2013-07-13T14:32:39+00:00 ERR: HORDE [horde] FAILED LOGIN for caligula  
[89.24.16.160] to Horde [pid 1693 on line 199 of  
"/var/www/html/horde/login.php"]

However logins through ActiveSync (and possibly SyncMl as well - not  
checked) are not in Error log:

2013-07-13T14:36:57+00:00 DEBUG: HORDE [horde] SQL  (0.0004s)
	SELECT * FROM horde_users WHERE user_uid = 'caligula' [pid 1971 on  
line 558 of "/usr/share/pear/Horde/Db/Adapter/Base.php"]

It would be useful to have similar error output (which includes user's  
address) so admins can monitor/limit access using tools like fail2ban.