2 Replies Latest reply on Oct 12, 2001 4:36 AM by ko5tik

    Failed login logged somewhere?

    tom

      Hi,

      playing around with the javaworld JbossSX example, I noticed that no logging is done for failed basic authentication in my current configuration, neither on the console nor in any of the tomcat logs.

      Does anybody know how to switch on logging for that
      case because I have to trace failed logins ...

        • 1. Re: Failed login logged somewhere?
          willievu

          If you use FORM-based authentication, you can define an error page. It is the page to which Tomcat will forward a client after login failure. You can handle logging there.

          • 2. Re: Failed login logged somewhere?
            ko5tik

            You can activate logging by tweking log4j.properties in jboss config.

            Category shall be exact like full class name of
            JbossSecurityMgrRealm ( look for it in server.xml under interceptors )

            Alternative would be to subclass login module of your choice and bomb from there.