[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Login failure tracking

From: Alain Palamara <alain.p_at_ces.ch>
Date: Thu, 26 Mar 2009 10:18:28 +0100

>> Hi all,
>> I'm using svnserve as a service on our server and try to control repositories
>> accesses by the way of the password and authz files. I set all the hooks
>> scripts to log activity (in a process to learn more what I can do, for now)
>> and one thing that I saw, is in case of a authorization failure, is that nothing
>> is reported by my hooks (start-commit, pre-commit, post-commit, pre-revprop-change,
>> post-rev-prop-change, pre-lock, post-lock, pre-unlock, post-unlock).
>> First of all, did I miss a hook script?
>svnserve --log-file
>(in 1.6)
>> Is there a way to catch the autentication phase?
>Log it? There are no "on-failed-auth" hooks.

Of course I don't want to log it, I just need to track unsuccessful attempt.

Does it mean there is no way to automatically block a brute force attack
(someone trying a username with a lot of passwords)?

>> Thanks, Alain
>> ------------------------------------------------------
>> http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=1427097
>> To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_subversion.tigris.org].


To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_subversion.tigris.org].
Received on 2009-03-26 10:19:42 CET

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.