by Luc Saffre · in Developers · assigned to Luc Saffre

Résumé

Concepts sous-jacents

Commentaires

• 4 semaines, 1 jour ago by Luc Saffre in reply to Luc Saffre about #7023 (ipdict didn't detect Too many authentication failures from 93.123.109.165) : Confirmed
• 4 semaines, 1 jour ago by Luc Saffre about #7023 (ipdict didn't detect Too many authentication failures from 93.123.109.165) (1 reply) : todo: upgrade stewards and confirm that issue is fixed.
• 4 semaines, 1 jour ago by Luc Saffre about #7023 (ipdict didn't detect Too many authentication failures from 93.123.109.165) : I added an entry for this in the changelog and started a documentation page about ipdict.
• 4 semaines, 1 jour ago by Luc Saffre in reply to Luc Saffre about #7023 (ipdict didn't detect Too many authentication failures from 93.123.109.165) : I basically just removed the following lines in lino/modlib/users/actions.py:
  if not User.objects.filter(username=pv.username).exists(): ar.error(_("Failed to sign in as {}.").format(pv.username)) return
  We don't need to test whether a user with that username exists, b...
• 1 mois ago by Luc Saffre about #7023 (ipdict didn't detect Too many authentication failures from 93.123.109.165) (1 reply) : Ha! The SignIn action didn't even try to authenticate on invalid username, so the user_login_failed signal wasn't emitted and accordingly the IP was never blacklisted.
• 1 mois ago by Luc Saffre about #7023 (ipdict didn't detect Too many authentication failures from 93.123.109.165) : If ipdict fails to detect the more than 10 manual wrong sign-in attempts on stewards, then why did Jane detect the wrong attempt in the night? And why does demotest.py detect them?
• 1 mois ago by Luc Saffre about #7023 (ipdict didn't detect Too many authentication failures from 93.123.109.165) : As the logger messages showed, the on_login_failed() function doesn't get called.
• 1 mois ago by Luc Saffre in reply to Luc Saffre about #7023 (ipdict didn't detect Too many authentication failures from 93.123.109.165) : Answer: because the manage.py was saying os.environ["LINO_FILE_LOGLEVEL"] = "DEBUG" The linod process runs with manage.py, not with asgi.py
  
• 1 mois ago by Luc Saffre about #7023 (ipdict didn't detect Too many authentication failures from 93.123.109.165) (1 reply) : The journalctl on stewards shows the "Too early to start System task..." messages every second, which should show only when level is DEBUG. But that's not the case. Why then are they there?
• 1 mois ago by Luc Saffre about #7023 (ipdict didn't detect Too many authentication failures from 93.123.109.165) : Exercise for Jan: explain the following line:
  dd.logger.warning("20260925 on_login_failed %s %s", sender, credentials)
  
  
• 1 mois ago by Luc Saffre about #7023 (ipdict didn't detect Too many authentication failures from 93.123.109.165) : Oops on stewards, use_ipdict was not True. But even after setting it to True, I cannot trigger the "Too many authentication failures" to come up.
• 1 mois ago by Luc Saffre about #7023 (ipdict didn't detect Too many authentication failures from 93.123.109.165) : Created new Ticket #7023 (Too many authentication failures from 93.123.109.165).