Security information: Difference between revisions

m
Tag: 2017 source edit
Tag: 2017 source edit
Line 82: Line 82:
*Internal logger to save permanently all Dolibarr events about user's administration and successful or failed logins or administration events (user or group or permission changes).
*Internal logger to save permanently all Dolibarr events about user's administration and successful or failed logins or administration events (user or group or permission changes).
*Can output a log record into a log file (module Debug Log must be enabled with at least level 5 - LOG_NOTICE) after success or failed login attempt so you can add a fail2ban rule to lock brute force cracking. You can check record with syntax :  
*Can output a log record into a log file (module Debug Log must be enabled with at least level 5 - LOG_NOTICE) after success or failed login attempt so you can add a fail2ban rule to lock brute force cracking. You can check record with syntax :  
  "YYYY-MM-DD HH:MM:SS (ERROR|NOTICE|INFO|DEBUG)    IP functions_dolibarr::check_user_password_dolibarr Authentication ko"
  "YYYY-MM-DD HH:MM:SS (ERROR|NOTICE|INFO|DEBUG)    IP functions_dolibarr::check_user_password_dolibarr Authentication KO"