#7023 (ipdict didn't detect Too many authentication failures from 93.123.109.165)
by Luc Saffre · in Developers · assigned to Luc Saffre
Kokkuvõte
Children
Kommentaarid
- 4 nädalat, 1 päev ago by Luc Saffre in reply to Luc Saffre about #7023 (ipdict didn't detect Too many authentication failures from 93.123.109.165) : Confirmed
- 4 nädalat, 1 päev ago by Luc Saffre about #7023 (ipdict didn't detect Too many authentication failures from 93.123.109.165) (1 reply) : todo: upgrade stewards and confirm that issue is fixed.
- 4 nädalat, 1 päev ago by Luc Saffre about #7023 (ipdict didn't detect Too many authentication failures from 93.123.109.165) : I added an entry for this in the changelog and started a documentation page about ipdict.
- 4 nädalat, 1 päev ago by Luc Saffre in reply to Luc Saffre about #7023 (ipdict didn't detect Too many authentication failures from 93.123.109.165) : I basically just removed the following lines in lino/modlib/users/actions.py:
if not User.objects.filter(username=pv.username).exists(): ar.error(_("Failed to sign in as {}.").format(pv.username)) return
We don't need to test whether a user with that username exists, b... - 1 kuu ago by Luc Saffre about #7023 (ipdict didn't detect Too many authentication failures from 93.123.109.165) (1 reply) : Ha! The SignIn action didn't even try to authenticate on invalid username, so the user_login_failed signal wasn't emitted and accordingly the IP was never blacklisted.
- 1 kuu ago by Luc Saffre about #7023 (ipdict didn't detect Too many authentication failures from 93.123.109.165) : If ipdict fails to detect the more than 10 manual wrong sign-in attempts on stewards, then why did Jane detect the wrong attempt in the night? And why does demotest.py detect them?
- 1 kuu ago by Luc Saffre about #7023 (ipdict didn't detect Too many authentication failures from 93.123.109.165) : As the logger messages showed, the on_login_failed() function doesn't get called.
- 1 kuu ago by Luc Saffre in reply to Luc Saffre about #7023 (ipdict didn't detect Too many authentication failures from 93.123.109.165) : Answer: because the manage.py was saying os.environ["LINO_FILE_LOGLEVEL"] = "DEBUG" The linod process runs with manage.py, not with asgi.py
- 1 kuu ago by Luc Saffre about #7023 (ipdict didn't detect Too many authentication failures from 93.123.109.165) (1 reply) : The journalctl on stewards shows the "Too early to start System task..." messages every second, which should show only when level is DEBUG. But that's not the case. Why then are they there?
- 1 kuu ago by Luc Saffre about #7023 (ipdict didn't detect Too many authentication failures from 93.123.109.165) : Exercise for Jan: explain the following line:
dd.logger.warning("20260925 on_login_failed %s %s", sender, credentials)
- 1 kuu ago by Luc Saffre about #7023 (ipdict didn't detect Too many authentication failures from 93.123.109.165) : Oops on stewards, use_ipdict was not True. But even after setting it to True, I cannot trigger the "Too many authentication failures" to come up.
- 1 kuu ago by Luc Saffre about #7023 (ipdict didn't detect Too many authentication failures from 93.123.109.165) : Created new Ticket #7023 (Too many authentication failures from 93.123.109.165).