users@glassfish.java.net

Re: Login failures spams server.log

From: <forums_at_java.net>
Date: Fri, 19 Aug 2011 11:05:31 -0500 (CDT)

> Will file an issue for 3.1.2 tracking.

Great, Kumar! Please post the issue id here.

> Right now i have made it a FINE log that prints the entire trace and the
WARNING will be a single line.

Absolutely a step in the Right Direction. But should a login error really be
considered a *server* problem at all?

> What you are suggesting can be done using a Custom Audit Module where all
authentication and authorization events are audited.

Sounds promising. Would that totally eliminate the log entry in server.log?
Any pointers to howtos on this would be much appreciated.

Cheers!

 


--
[Message sent by forum member 'tmpsa']
View Post: http://forums.java.net/node/834556