owncloud / twofactor_totp

🔑 Second factor TOTP (Google Authenticator) provider for ownCloud
GNU Affero General Public License v3.0
9 stars 9 forks source link

Not logging failed login attemps #189

Closed wassereimer86 closed 3 years ago

wassereimer86 commented 3 years ago

If i enter a wrong 2fa code it doesn´t generate an entry in the owncloud.log file. I think this should happen so that fail2ban can stop attacks.

See: https://doc.owncloud.com/server/admin_manual/configuration/server/harden_server.html#using-fail2ban-to-secure-an-owncloud-login

karakayasemi commented 3 years ago

Thank you for opening an issue. This problem is resolved with https://github.com/owncloud/core/pull/37401 . It will be in ownCloud server version 10.5.0 which will release very soon.