[SERVER-15573] Print date and time of last user login in shell. Created: 08/Oct/14 Updated: 06/Dec/22 Resolved: 29/Jun/20 |
|
| Status: | Closed |
| Project: | Core Server |
| Component/s: | Logging, Security, Shell |
| Affects Version/s: | 2.7.7 |
| Fix Version/s: | None |
| Type: | New Feature | Priority: | Major - P3 |
| Reporter: | Andreas Nilsson | Assignee: | Backlog - Security Team |
| Resolution: | Won't Do | Votes: | 2 |
| Labels: | platforms-re-triaged | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Issue Links: |
|
||||||||||||
| Assigned Teams: |
Server Security
|
||||||||||||
| Participants: | |||||||||||||
| Case: | (copied to CRM) | ||||||||||||
| Description |
|
http://www.stigviewer.com/check/V-32259 Print a message on the lines of:
on successful login in the shell. This allows the user to detect suspicious activity. |
| Comments |
| Comment by Jessica Sigafoos [ 29/Jun/20 ] |
|
This functionality is not being prioritized in the new shell at this time, and would likely require work from the server team in order to support. |
| Comment by Andreas Nilsson [ 09/Oct/14 ] |
|
agreed. |
| Comment by Eric Milkie [ 09/Oct/14 ] |
|
That is the first half of the work for this ticket; the second half will be modifications to the shell to actually print the response from the authenticate command, which will occur in _authOrThrow() I believe. The last user login info will indeed be available for all drivers to consume, via the response from the authenticate command. |
| Comment by Andreas Nilsson [ 09/Oct/14 ] |
|
Actually no, I mean successful authentication to the server by any means. Successful completion of the authenticate command, including by another driver. |
| Comment by Eric Milkie [ 08/Oct/14 ] |
|
By "successful login", you mean successful completion of the _authOrThrow() shell function, correct? That is the common function that handles user login from both the interactive shell and from the shell's command line via command line parameters. |