Uploaded image for project: 'Couchbase Server'
  1. Couchbase Server
  2. MB-51754

We should not audit log the auth failure of the first stage SCRAM-SHA request

    XMLWordPrintable

Details

    • Triaged
    • 1
    • Unknown

    Description

      Because the response on the first stage of SCRAM-SHA authentication is always 401. The second stage request built using headers from the first stage response is the one that should be audited.

      We still should log 401 to the access log though.

      As seen in CBSE-11753

      Attachments

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

        Activity

          People

            steve.watanabe Steve Watanabe
            artem Artem Stemkovski
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Gerrit Reviews

                There are no open Gerrit changes

                PagerDuty