Logging log attempts

[Phil F Lynch, modifié il y a 14 années.]

Hi there,

I'm new to this forum. Does anyone know how to log login attempts? In other words, when someone logs in or attempts to log in but unsuccessfully, does Liferay keep a record of this? If not, is there a way to make it keep a record of this? Thanks for any info!

Phil

[Lisa Simpson, modifié il y a 14 années.]

That's a good question. It would certainly be beneficial to security to monitor this and put in a wait period to stop "hammering" after a sufficient number of failed log in attempts.

[Tarun S. Kayasth, modifié il y a 14 années.]

Hi Phil,

I don't think Liferay keeps track of someone who attempts to log in but unsuccessfully.

Tarun Kayasth
CIGNEX Technologies Pvt. Ltd.

[Lisa Simpson, modifié il y a 14 années.]

That's actually a pretty important and basic security measure. Google on brute force... It's been ages since I wrote my script but if you give me enough time and and enough chances, I can force anything.