Skip to content

Remove not a valid Unix login logging#25809

Merged
rosstimothy merged 1 commit intomasterfrom
tross/invalid_unix_login
May 8, 2023
Merged

Remove not a valid Unix login logging#25809
rosstimothy merged 1 commit intomasterfrom
tross/invalid_unix_login

Conversation

@rosstimothy
Copy link
Copy Markdown
Contributor

No description provided.

Copy link
Copy Markdown
Contributor

@fspmarshall fspmarshall left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nit: this is theoretically useful if users are actually adding invalid unix logins... maybe we should just be skipping the log for invalid unix logins that begin with -teleport (e.g. -teleport-internal-join, -teleport-nologin-deadbeef, etc)?

@rosstimothy
Copy link
Copy Markdown
Contributor Author

rosstimothy commented May 8, 2023

nit: this is theoretically useful if users are actually adding invalid unix logins... maybe we should just be skipping the log for invalid unix logins that begin with -teleport (e.g. -teleport-internal-join, -teleport-nologin-deadbeef, etc)?

I think the majority of hits on this end up being in the from no-login-<UUID> though:
image

They are quite frequent too:
image

@rosstimothy rosstimothy force-pushed the tross/invalid_unix_login branch from 12ef68b to 05c00b3 Compare May 8, 2023 17:18
@rosstimothy
Copy link
Copy Markdown
Contributor Author

@fspmarshall I've made the logging conditional to ignore Teleport internal invalid logins. I think we should perhaps audit and remove the no-login-<uuid> that is added to the auditor role as well. I don't see anything actively consuming it and I believe roles support not having any logins defined. There is nothing stopping users from removing the generated login from the auditor role either, so anything dependent on it existing is likely to not work properly any way.

@rosstimothy rosstimothy marked this pull request as ready for review May 8, 2023 18:49
@github-actions github-actions Bot requested review from ibeckermayer and jakule May 8, 2023 18:50
@rosstimothy rosstimothy added this pull request to the merge queue May 8, 2023
Merged via the queue into master with commit 8f9b5c7 May 8, 2023
@rosstimothy rosstimothy deleted the tross/invalid_unix_login branch May 8, 2023 19:05
@public-teleport-github-review-bot
Copy link
Copy Markdown

@rosstimothy See the table below for backport results.

Branch Result
branch/v11 Create PR
branch/v12 Create PR
branch/v13 Create PR

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants