Annotate

mod_log_sasl_mech/mod_log_sasl_mech.lua @ 5298:12f7d8b901e0

mod_audit: Support for adding location (GeoIP) to audit events This can be more privacy-friendly than logging full IP addresses, and also more informative to a user - IP addresses don't mean much to the average person, however if they see activity from outside their expected country, they can immediately identify suspicious activity. As with IPs, this field is configurable for deployments that would like to disable it. Location is also not logged when the geoip library is not available.
author Matthew Wild <mwild1@gmail.com>
date Sat, 01 Apr 2023 13:11:53 +0100
parent 1393:4baaa5a66a5a
child 5795:5ff8022466ab
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
1292
2d061333d0c2 mod_log_sasl_mech: Logs authentication mechanism used
Kim Alvefur <zash@zash.se>
parents:
diff changeset
1
2d061333d0c2 mod_log_sasl_mech: Logs authentication mechanism used
Kim Alvefur <zash@zash.se>
parents:
diff changeset
2 module:hook("authentication-success", function (event)
1393
4baaa5a66a5a mod_log_sasl_mech: Log SASL mechanism attached to session
Kim Alvefur <zash@zash.se>
parents: 1292
diff changeset
3 local session = event.session;
4baaa5a66a5a mod_log_sasl_mech: Log SASL mechanism attached to session
Kim Alvefur <zash@zash.se>
parents: 1292
diff changeset
4 local sasl_handler = session.sasl_handler;
4baaa5a66a5a mod_log_sasl_mech: Log SASL mechanism attached to session
Kim Alvefur <zash@zash.se>
parents: 1292
diff changeset
5 session.log("info", "Authenticated with %s", sasl_handler and sasl_handler.selected or "legacy auth");
1292
2d061333d0c2 mod_log_sasl_mech: Logs authentication mechanism used
Kim Alvefur <zash@zash.se>
parents:
diff changeset
6 end);