[jira] [Commented] (COUCHDB-2777) Log when authentication fails

["ASF GitHub Bot (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/COUCHDB-2777?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14700093#comment-14700093 ] 

ASF GitHub Bot commented on COUCHDB-2777:
-----------------------------------------

GitHub user rnewson opened a pull request:

    https://github.com/apache/couchdb-couch/pull/87

    Log when password is wrong but user is valid

    COUCHDB-2777

You can merge this pull request into a Git repository by running:

    $ git pull https://github.com/cloudant/couchdb-couch 2777-log-auth-fail

Alternatively you can review and apply these changes as the patch at:

    https://github.com/apache/couchdb-couch/pull/87.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

    This closes #87
    
----
commit f02f5f94a727fc2b2d080afae49c9392581090aa
Author: Robert Newson <rn...@apache.org>
Date:   2015-08-17T19:29:45Z

    Log when password is wrong but user is valid
    
    COUCHDB-2777

----


> Log when authentication fails
> -----------------------------
>
>                 Key: COUCHDB-2777
>                 URL: https://issues.apache.org/jira/browse/COUCHDB-2777
>             Project: CouchDB
>          Issue Type: Improvement
>      Security Level: public(Regular issues) 
>            Reporter: Robert Newson
>
> In the specific case of the wrong passwords for a valid user, log a warning. The HTTP response should still not indicate whether the user name or password was wrong.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)