Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    2.5.0 logging authentication

    Scheduled Pinned Locked Moved
    2.5 Development Snapshots (Retired)
    2
    16
    1.2k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • jimpJ
      jimp Rebel Alliance Developer Netgate
      last edited by

      It may be syslogd suppressing what it thinks are duplicate messages if the content is identical to the previous instance.

      Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

      Need help fast? Netgate Global Support!

      Do not Chat/PM for help!

      1 Reply Last reply Reply Quote 0
      • M
        maverick_slo
        last edited by

        Maybe. But i think thats not ok.

        1 Reply Last reply Reply Quote 0
        • jimpJ
          jimp Rebel Alliance Developer Netgate
          last edited by

          If you logout and login fast enough to trigger the suppression then it's unlikely to be something shady, though. It will log a message saying something like last message repeated <number> times so it doesn't go completely unrecorded.

          As you said if it comes from another address, it does get logged.

          There is an option for syslogd to disable that throttling/compression but running it the other way could lead to even more problems.

          Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

          Need help fast? Netgate Global Support!

          Do not Chat/PM for help!

          1 Reply Last reply Reply Quote 0
          • M
            maverick_slo
            last edited by

            Nothing is logged about surpression.
            But web gui nginx logs shows ok accesses confirming it was only me on the system...

            1 Reply Last reply Reply Quote 0
            • M
              maverick_slo
              last edited by

              Disregard about surpression.
              It is completley random, sometimes it logs and sometimes not. Nginx log for example shows i was clicking trough menu but auth log and syslog show nothing...

              1 Reply Last reply Reply Quote 0
              • M
                maverick_slo
                last edited by

                Ok found pattern

                Login, then logout then login again nothing logged.

                Login, then logout AND press F5 then login, logged everytime

                Cookies?

                1 Reply Last reply Reply Quote 0
                • M
                  maverick_slo
                  last edited by

                  Also failed logins are not logged.
                  Just upgraded to latest snap, same thing...

                  1 Reply Last reply Reply Quote 0
                  • M
                    maverick_slo
                    last edited by

                    Ssh logons are always correctly logged. So there is something borked somewhere, maybe php, nginx I dont know...

                    1 Reply Last reply Reply Quote 0
                    • M
                      maverick_slo
                      last edited by

                      Even worst...
                      Tried fresh 2.5.0

                      It does not log anything about webgui logon/logoff at all...

                      Not checked disable gui logging so it should be there.

                      1 Reply Last reply Reply Quote 0
                      • M
                        maverick_slo
                        last edited by

                        OK, so I guess there seems to be cache issue or something with my browser, tried from 2 different computers with firefox and I get same results, auth is not logged everytime.
                        Then I used Chrome, and it logs EVERY login / logout correctly.

                        ??? :)

                        1 Reply Last reply Reply Quote 0
                        • M
                          maverick_slo
                          last edited by

                          Also fresh Firefox is working OK, just my 2 firefoxes (which I sync to them) are not being logged everytime but sporadically.

                          1 Reply Last reply Reply Quote 0
                          • jimpJ
                            jimp Rebel Alliance Developer Netgate
                            last edited by

                            Maybe some browser add-on isn't actually removing your cookie when you logout? Or something similar.

                            When the browser actually logs out and back in, it gets logged. You appear to have some local problem and not a problem with the firewall.

                            Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                            Need help fast? Netgate Global Support!

                            Do not Chat/PM for help!

                            1 Reply Last reply Reply Quote 0
                            • M
                              maverick_slo
                              last edited by

                              Well I did complete reset of browser and now it works correctly.

                              Thanks for suggestions!

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post