luci-base: send failed/successfull login to syslog

Note: This change is relevant for systems that don't
use uhttpd for LuCI.
This log can be later used for fail2ban etc.

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit be8d749599)
This commit is contained in:
Jan Pavlinec 2021-03-12 16:24:52 +01:00 committed by Josef Schlehofer
parent f28aaa35cd
commit ae0c92af2a
No known key found for this signature in database
GPG key ID: B950216FE4329F4C

View file

@ -563,15 +563,13 @@ local function session_setup(user, pass)
ubus_rpc_session = login.ubus_rpc_session,
values = { token = sys.uniqueid(16) }
})
io.stderr:write("luci: accepted login on /%s for %s from %s\n"
%{ rp, user or "?", http.getenv("REMOTE_ADDR") or "?" })
nixio.syslog("info", tostring("luci: accepted login on /%s for %s from %s\n"
%{ rp, user or "?", http.getenv("REMOTE_ADDR") or "?" }))
return session_retrieve(login.ubus_rpc_session)
end
io.stderr:write("luci: failed login on /%s for %s from %s\n"
%{ rp, user or "?", http.getenv("REMOTE_ADDR") or "?" })
nixio.syslog("info", tostring("luci: failed login on /%s for %s from %s\n"
%{ rp, user or "?", http.getenv("REMOTE_ADDR") or "?" }))
end
local function check_authentication(method)