How to log login attempts?

[spookybathtub]

I need a way of logging all the login attempts made on my subsonic server. My organization's Information Security department requires this in order for us to use LDAP authentication. But the subsonic.log file seems to only contain information about songs being played. How can I do this?

[ytechie]

Unfortunately, as of now, this can't be done. Many people have requested more granular logging capabilities, and I'm sure that we will see that in the near future.

[spookybathtub]

I mean no disrespect, but are you sure this is absolutely impossible currently?

[GJ51]

It's certainly not a current feature of the program. I suppose if you are a database guru you might be able to mod the program to give you the results you need, but every discussion I've seen on the topic has not revealed an answer to this issue. There is no evidence that I have seen that would indicate that the information is even recorded by the database, but again I don't know for certain wether or not that is the case.

I'm not all that familiar with using LDAP but the note within Subsonic states that Users are authenticated by the LDAP server. When the LDAP enabled users log on to Subsonic, the username and password are checked by the external server, not by Subsonic itself.

Therefore, I would think it may actually be easier for an IT expert to get this information from the LDAP server as I would think that each authentication request event would be recorded in the LDAP server logs. You stated that your IS dept requires a way of recording all logon attempts in order to use LDAP authentication. Does that mean that all the other applications on your network have that capability? Interesting issue, but my guess is that it would be easier to get that info on the LDAP end.

Some of this may be relevant or give someone else a few ideas:

http://technet.microsoft.com/en-us/libr ... 80(v=WS.10).aspx

Here's some ideas relevant to Windows 7:

http://answers.microsoft.com/en-us/wind ... a9360efdbf

[ytechie]

The information is not recorded in the database as of version 4.5 and 4.6. I did some extensive code walk throughs, and nowhere in the database is the login info recorded. But again, that can change pretty easily. It doesn't seem hard to incorporate that functionality into the java backend, and I'm sure it's on Sindre's mind.

Like GJ51 said, recording the LDAP requests might be a temporary workaround for now, if that's plausible.
Hope this helps!

[sir2u]

See my reply on this other thread: http://forum.subsonic.org/forum/viewtopic.php?f=2&t=8962&p=40027#p40027

[ytechie]

I was wrong. It looks like the LDAP attempts are indeed logged. sir2u, thank you for the very valuable information!