Project

General

Profile

[Solved] Digest login logging

Added by yurylankovskiy about 6 years ago

Hello,

I have a question regarding logging for digest login method. I'm using the following settings for digest method

accesslog.use-syslog       = "enable" 

auth.backend = "htdigest" 
auth.backend.htdigest.userfile = "/etc/lighttpd/.lighttpdpassword" 
auth.require = ( 
    "/s" => (
        "method" => "digest",
        "realm" => "realm",
        "require" => "user=admin|user=guest" 
    )
)

I'm trying to figure out if it's possible to produce a meaningful log for user authentications, specifically if I'm using syslog.

Right now I'm seeing the following in my logs (the end is cut off a bit),

Apr  6 04:21:04 realm daemon.info lighttpd[22078]: 192.168.1.3 192.168.1.103 - [06/Apr/2018:04:21:04 -0500] "GET /secure/index.html HTTP/1.1" 401 351 "http://192.168.1.103/" --> when I send wrong credentials to LOGOUT
Apr  6 04:21:06 realm daemon.info lighttpd[22078]: 192.168.1.3 192.168.1.103 admin [06/Apr/2018:04:21:05 -0500] "GET /secure/index.html HTTP/1.1" 200 66382 "http://192.168.1.103/" --> LOGIN, which looks just like any other time I try to load index.html page

There must be some way I can obtain a meaningful log for this ...

Thanks in advance!


Replies (1)

RE: [Solved] Digest login logging - Added by gstrauss about 6 years ago

If you click on your username, you'll see the questions that you asked 7 months ago. Why are you cross posting all over when you can't find that you posted the same question 7 months ago? https://redmine.lighttpd.net/boards/2/topics/7609

Log the Authentication header if you need this information, and keep your logs private.

    (1-1/1)