Re: Tracking Authentication rejects in Tomcat 5.5

2007-10-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Scott and Kevin, Scott Smith wrote: > I'm using Tomcat 5.5 and using dataSourceRealm to do authentication. I > need to track bad logins. In particular, I want to track any logins > where the password is wrong. I also want to track the remote server

RE: Tracking Authentication rejects in Tomcat 5.5

2007-10-29 Thread Scott Smith
ckson [mailto:[EMAIL PROTECTED] Sent: Mon 10/29/2007 10:03 PM To: Tomcat Users List Subject: Re: Tracking Authentication rejects in Tomcat 5.5 Hi, > Does anyone have a suggestion? Does the general approach seem > reasonable? We have similar requirements, but at the moment we are using a

Re: Tracking Authentication rejects in Tomcat 5.5

2007-10-29 Thread Kevin Jackson
Hi, > Does anyone have a suggestion? Does the general approach seem > reasonable? We have similar requirements, but at the moment we are using a subclass of JDBCRealm, here is our authenticate method: @Override public Principal authenticate(Connection connection, String userName, String

Tracking Authentication rejects in Tomcat 5.5

2007-10-29 Thread Scott Smith
I'm using Tomcat 5.5 and using dataSourceRealm to do authentication. I need to track bad logins. In particular, I want to track any logins where the password is wrong. I also want to track the remote server's IP address that provides a bad login. It appears that I can track bad logins by cre