Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    2.5.0 logging authentication

    2.5 Development Snapshots (Retired)
    2
    16
    883
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      maverick_slo last edited by

      Hi all.

      I noticed that if I login and logout only sometimes my AUTH log shows that I logged in. There are lots of missing logins in the log file.

      Right now I did 3 logins and 3 logouts and none were recorded.

      1 Reply Last reply Reply Quote 0
      • jimp
        jimp Rebel Alliance Developer Netgate last edited by

        Login and logout to what? The GUI? SSH? A VPN?

        Does it show in the main system log but not the auth log?

        Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

        Need help fast? Netgate Global Support!

        Do not Chat/PM for help!

        1 Reply Last reply Reply Quote 0
        • M
          maverick_slo last edited by

          Hi.
          Logging in to web gui.
          It doesnt show in system or auth. If i do it from another ip it shows.
          Openvpn is logged everytime correctly.

          1 Reply Last reply Reply Quote 0
          • jimp
            jimp Rebel Alliance Developer Netgate last edited by

            It may be syslogd suppressing what it thinks are duplicate messages if the content is identical to the previous instance.

            Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

            Need help fast? Netgate Global Support!

            Do not Chat/PM for help!

            1 Reply Last reply Reply Quote 0
            • M
              maverick_slo last edited by

              Maybe. But i think thats not ok.

              1 Reply Last reply Reply Quote 0
              • jimp
                jimp Rebel Alliance Developer Netgate last edited by

                If you logout and login fast enough to trigger the suppression then it's unlikely to be something shady, though. It will log a message saying something like last message repeated <number> times so it doesn't go completely unrecorded.

                As you said if it comes from another address, it does get logged.

                There is an option for syslogd to disable that throttling/compression but running it the other way could lead to even more problems.

                Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

                Need help fast? Netgate Global Support!

                Do not Chat/PM for help!

                1 Reply Last reply Reply Quote 0
                • M
                  maverick_slo last edited by

                  Nothing is logged about surpression.
                  But web gui nginx logs shows ok accesses confirming it was only me on the system...

                  1 Reply Last reply Reply Quote 0
                  • M
                    maverick_slo last edited by

                    Disregard about surpression.
                    It is completley random, sometimes it logs and sometimes not. Nginx log for example shows i was clicking trough menu but auth log and syslog show nothing...

                    1 Reply Last reply Reply Quote 0
                    • M
                      maverick_slo last edited by

                      Ok found pattern

                      Login, then logout then login again nothing logged.

                      Login, then logout AND press F5 then login, logged everytime

                      Cookies?

                      1 Reply Last reply Reply Quote 0
                      • M
                        maverick_slo last edited by

                        Also failed logins are not logged.
                        Just upgraded to latest snap, same thing...

                        1 Reply Last reply Reply Quote 0
                        • M
                          maverick_slo last edited by

                          Ssh logons are always correctly logged. So there is something borked somewhere, maybe php, nginx I dont know...

                          1 Reply Last reply Reply Quote 0
                          • M
                            maverick_slo last edited by

                            Even worst...
                            Tried fresh 2.5.0

                            It does not log anything about webgui logon/logoff at all...

                            Not checked disable gui logging so it should be there.

                            1 Reply Last reply Reply Quote 0
                            • M
                              maverick_slo last edited by

                              OK, so I guess there seems to be cache issue or something with my browser, tried from 2 different computers with firefox and I get same results, auth is not logged everytime.
                              Then I used Chrome, and it logs EVERY login / logout correctly.

                              ??? :)

                              1 Reply Last reply Reply Quote 0
                              • M
                                maverick_slo last edited by

                                Also fresh Firefox is working OK, just my 2 firefoxes (which I sync to them) are not being logged everytime but sporadically.

                                1 Reply Last reply Reply Quote 0
                                • jimp
                                  jimp Rebel Alliance Developer Netgate last edited by

                                  Maybe some browser add-on isn't actually removing your cookie when you logout? Or something similar.

                                  When the browser actually logs out and back in, it gets logged. You appear to have some local problem and not a problem with the firewall.

                                  Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

                                  Need help fast? Netgate Global Support!

                                  Do not Chat/PM for help!

                                  1 Reply Last reply Reply Quote 0
                                  • M
                                    maverick_slo last edited by

                                    Well I did complete reset of browser and now it works correctly.

                                    Thanks for suggestions!

                                    1 Reply Last reply Reply Quote 0
                                    • First post
                                      Last post