Bug #36979
closedUser authentication syslog severity
100%
Description
The sysLog severity for logging authentication failures in 'tx_sv_auth' is set to 0 (=info). This should be set to 3 (=Error), or maybe at least 2 (=Warning).
See:
tx_sv_auth::getUser
tx_sv_auth::authUser
Updated by Philipp Gampe over 12 years ago
Want to provide a patch? http://wiki.typo3.org/Contribute_Walkthrough
Whether 2 or 3, maybe the security team can make a decision (security@typo3.org). IMHO it should be warning.
Updated by Gerrit Code Review over 12 years ago
- Status changed from New to Under Review
Patch set 1 for branch master has been pushed to the review server.
It is available at http://review.typo3.org/11517
Updated by Arjen Hoekema over 12 years ago
Patch submitted with SYSLOG_SEVERITY_WARNING.
Updated by Gerrit Code Review over 12 years ago
Patch set 2 for branch master has been pushed to the review server.
It is available at http://review.typo3.org/11517
Updated by Gerrit Code Review over 12 years ago
Patch set 3 for branch master has been pushed to the review server.
It is available at http://review.typo3.org/11517
Updated by Gerrit Code Review over 12 years ago
Patch set 4 for branch master has been pushed to the review server.
It is available at http://review.typo3.org/11517
Updated by Arjen Hoekema over 12 years ago
- Status changed from Under Review to Resolved
- % Done changed from 0 to 100
Applied in changeset c492a1d0e2459718d36af31bcba7f81e77db0ea2.