1. Proposed title of this feature request Failed and successful login attempts logged by default 3. What is the nature and description of the request? You need debug logging set to get logs for failed logins. This should not require debug level logging. 4. Why does the customer need this? (List the business requirements here) The customer has extensive auditing requirements due to the nature of their business. 5. How would the customer like to achieve this? (List the functional requirements here) Failed login attempts should be logged without needing to turn on debugging which includes lots of unneeded info. 6. For each functional requirement listed, specify how Red Hat and the customer can test to confirm the requirement is successfully implemented. 1) verify debug logging is not enabled 2) attempt to log into the system with incorrect credentials 3) successfully login with correct credentials 4) verify the failed and successful logins are noted in the logs 7. Is there already an existing RFE upstream or in Red Hat Bugzilla? No 10. List any affected packages or components. Logging
What is the application? OpenShift itself? What is the user logging into?
This is the OpenShift audit log for all the access events logged when debug logging is set. Basically looking for a new flag for just success/failed access related events.
The PR in flight: https://github.com/openshift/origin/pull/14535
This landed as part of https://github.com/openshift/origin/pull/16128. The remaining piece is documentation, I'm currently working on.
Verified in ocp env with version: 3.7.0-0.133.0