1 Apr 2006 05:17
Re: Audit File
Chris Zagar <zagar <at> usefulutilities.com>
2006-04-01 03:17:17 GMT
2006-04-01 03:17:17 GMT
> Is there a way to log the passwords that is being used in the audit file? > It would nice to see a pattern on Login Failures whether it is a random or > sequential. I am seeing several usernames with as many as 10 attempts. You can enable this by adding the audit event: Login.Failure.Password such as: Audit Most Login.Failure.Password I would only recommend using it in those scenarios where the password is something like last name from an ILS or some other such fact that isn't a secret held only by the remote user, but whether or not to use these options is left to the discretion of the institution implementing EZproxy. There is also an error regarding the related Login.Success.Password and Login.Success.Groups that is corrected in the upcoming EZproxy 3.6f. As far as e-mailing on events, that is planned indeed planned as an upcoming enhancement, although it's not scheduled for release for 2-3 months. Chris -- -- Chris Zagar <zagar <at> usefulutilities.com> Useful Utilities <http://www.usefulutilities.com>(Continue reading)
RSS Feed