Change Failed Authentication Logging

[Luys]

Hi all,

I wonder if it is possible to modify the behaviour of the Authentication Logging. Say, for instance, I have a user marc, who tries to logon to my webserver (standard authentication, .htaccess based). If he types the wrong credentials, I directly receive a 'authentication failed' message in my messages file. What I want to do is give the user 3 attempts (without any notification in the logging) and after these 3 attempts, it should deny the user and send a message through syslog to the messages file.

Is this possible and, if so, how?


Regards,
Richard

 

[feherke]

Hi

The HTTP protocol is stateless. Each request is separate, not related to anything happened before. The server has no idea what previous requests a client had. So it has no idea if is the first or the third attempt.

Feherke.

http://rootshell.be/~feherke/

 

[lgarner]

You'd need to use something like

http://simple-evcorr.sourceforge.net/.