Bug 534187 (RHQ-1007)

Summary: RFE: provide audit log of which users logged in and when.
Product: [Other] RHQ Project Reporter: John Mazzitelli <mazz>
Component: Core ServerAssignee: Nobody <nobody>
Status: NEW --- QA Contact:
Severity: medium Docs Contact:
Priority: low    
Version: unspecifiedCC: jshaughn, lakagwu
Target Milestone: ---Keywords: FutureFeature, SubTask
Target Release: ---   
Hardware: All   
OS: All   
URL: http://jira.rhq-project.org/browse/RHQ-1007
Whiteboard:
Fixed In Version: Doc Type: Enhancement
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 534205    

Description John Mazzitelli 2008-10-22 13:37:00 UTC
It would be nice if RHQ stored some login audit trail information, such as who logged in and when they logged in.

Would need a page (probably in Administration somewhere) that lets you view this login audit trail and purge old audit data you no longer need.

Would need new code in DataPurgeJob to purge the audit trail to avoid it growing unbounded.

Comment 1 John Mazzitelli 2008-10-22 13:41:44 UTC
The db table needed would be very simple - since its a log purely for security-auditng purposes, you don't need any foreign key relationships back to the subject table.  Just store the username and the login time.  Then we can run simple reports on that two-column table such as "who logged in in the last month", "how often did joey log in in the past year", etc.

TABLE: rhq_login_audit
COLUMNS: subject (VARCHAR), login_time (LONG)

Comment 2 Red Hat Bugzilla 2009-11-10 20:21:45 UTC
This bug was previously known as http://jira.rhq-project.org/browse/RHQ-1007


Comment 3 wes hayutin 2010-02-16 15:49:54 UTC
mass move off of the qa rhq_triage queue, these are dev subtasks

Comment 4 Corey Welton 2010-08-18 15:41:18 UTC
*** Bug 534205 has been marked as a duplicate of this bug. ***