2:58 p.m.
I'm working on adding email notifications for events. The events I think we need to
support are:
* Suspected malicious login
* Password changed
Also at the same time I'm adding theme support for emails. Folks are just not going to
want their emails to be signed 'Thanks, The Keycloak Team' ;)
5:51 p.m.
FYI, I'm thinking of disabling Brute force detection for now. It really
should be dealing with IP addresses. We have a good fallback with
fail2ban until we get this feature properly implemented with keycloak.
On 5/19/2014 8:58 AM, Stian Thorgersen wrote:
I'm working on adding email notifications for events. The events
I think we need to support are:
* Suspected malicious login
* Password changed
Also at the same time I'm adding theme support for emails. Folks are just not going
to want their emails to be signed 'Thanks, The Keycloak Team' ;)
_______________________________________________
keycloak-dev mailing list
keycloak-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-dev
--
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com
5:59 p.m.
Hi Stian, I think is a good idea. But what would you consider a
malicious login? Are you talking about something like brute forcing or
attempts of code injection?
On 2014-05-19, Stian Thorgersen wrote:
I'm working on adding email notifications for events. The events
I think we need to support are:
* Suspected malicious login
* Password changed
Also at the same time I'm adding theme support for emails. Folks are just not going
to want their emails to be signed 'Thanks, The Keycloak Team' ;)
_______________________________________________
keycloak-dev mailing list
keycloak-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-dev
--
abstractj
JBoss, a division of Red Hat
6:12 p.m.
Not sure how code injection could happen with Keycloak? But, he's
talking about Brute force.
On 5/19/2014 11:59 AM, Bruno Oliveira wrote:
Hi Stian, I think is a good idea. But what would you consider a
malicious login? Are you talking about something like brute forcing or
attempts of code injection?
On 2014-05-19, Stian Thorgersen wrote:
> I'm working on adding email notifications for events. The events I think we need
to support are:
>
> * Suspected malicious login
> * Password changed
>
> Also at the same time I'm adding theme support for emails. Folks are just not
going to want their emails to be signed 'Thanks, The Keycloak Team' ;)
> _______________________________________________
> keycloak-dev mailing list
> keycloak-dev(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-dev
--
abstractj
JBoss, a division of Red Hat
_______________________________________________
keycloak-dev mailing list
keycloak-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-dev
--
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com
6:14 p.m.
In that case I'm not sure if we can send emails for suspected malicious logins. Unless
we just add something that sends an email after 3? failed login attempts?
----- Original Message -----
From: "Bill Burke" <bburke(a)redhat.com>
To: keycloak-dev(a)lists.jboss.org
Sent: Monday, 19 May, 2014 4:51:28 PM
Subject: Re: [keycloak-dev] Email notifications on events and theme support for emails
FYI, I'm thinking of disabling Brute force detection for now. It really
should be dealing with IP addresses. We have a good fallback with
fail2ban until we get this feature properly implemented with keycloak.
On 5/19/2014 8:58 AM, Stian Thorgersen wrote:
> I'm working on adding email notifications for events. The events I think we
> need to support are:
>
> * Suspected malicious login
> * Password changed
>
> Also at the same time I'm adding theme support for emails. Folks are just
> not going to want their emails to be signed 'Thanks, The Keycloak Team' ;)
> _______________________________________________
> keycloak-dev mailing list
> keycloak-dev(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>
--
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com
_______________________________________________
keycloak-dev mailing list
keycloak-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-dev
7:34 p.m.
Not sure if you guys have something in mind. But what if we had an SPI
for notifications about malicious activities? For example: We could write
an adapter to notify users via push server about a malicious attempt.
Into this way even if their e-mail account get hacked, they still get
the notification on device.
On 2014-05-19, Bill Burke wrote:
Not sure how code injection could happen with Keycloak? But,
he's
talking about Brute force.
On 5/19/2014 11:59 AM, Bruno Oliveira wrote:
> Hi Stian, I think is a good idea. But what would you consider a
> malicious login? Are you talking about something like brute forcing or
> attempts of code injection?
>
> On 2014-05-19, Stian Thorgersen wrote:
>> I'm working on adding email notifications for events. The events I think we
need to support are:
>>
>> * Suspected malicious login
>> * Password changed
>>
>> Also at the same time I'm adding theme support for emails. Folks are just
not going to want their emails to be signed 'Thanks, The Keycloak Team' ;)
>> _______________________________________________
>> keycloak-dev mailing list
>> keycloak-dev(a)lists.jboss.org
>> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>
> --
>
> abstractj
>
> JBoss, a division of Red Hat
> _______________________________________________
> keycloak-dev mailing list
> keycloak-dev(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>
--
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com
_______________________________________________
keycloak-dev mailing list
keycloak-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-dev
--
abstractj
9:32 p.m.
We already have an SPI ;). It's rather poorly named AuditListenerProvider. It lets you
create a listener for any account related events, such as logins, failed logins, password
updates, etc.. The plan is to add a email implementation for this that will send both
users and admin(s) an email on certain (configurable) events.
What's lacking atm is events for suspected malicious activities, the only event
available now is failed login.
----- Original Message -----
From: "Bruno Oliveira" <bruno(a)abstractj.org>
To: "Bill Burke" <bburke(a)redhat.com>
Cc: keycloak-dev(a)lists.jboss.org
Sent: Monday, 19 May, 2014 6:34:54 PM
Subject: Re: [keycloak-dev] Email notifications on events and theme support for emails
Not sure if you guys have something in mind. But what if we had an SPI
for notifications about malicious activities? For example: We could write
an adapter to notify users via push server about a malicious attempt.
Into this way even if their e-mail account get hacked, they still get
the notification on device.
On 2014-05-19, Bill Burke wrote:
> Not sure how code injection could happen with Keycloak? But, he's
> talking about Brute force.
>
> On 5/19/2014 11:59 AM, Bruno Oliveira wrote:
> > Hi Stian, I think is a good idea. But what would you consider a
> > malicious login? Are you talking about something like brute forcing or
> > attempts of code injection?
> >
> > On 2014-05-19, Stian Thorgersen wrote:
> >> I'm working on adding email notifications for events. The events I
think
> >> we need to support are:
> >>
> >> * Suspected malicious login
> >> * Password changed
> >>
> >> Also at the same time I'm adding theme support for emails. Folks are
> >> just not going to want their emails to be signed 'Thanks, The Keycloak
> >> Team' ;)
> >> _______________________________________________
> >> keycloak-dev mailing list
> >> keycloak-dev(a)lists.jboss.org
> >> https://lists.jboss.org/mailman/listinfo/keycloak-dev
> >
> > --
> >
> > abstractj
> >
> > JBoss, a division of Red Hat
> > _______________________________________________
> > keycloak-dev mailing list
> > keycloak-dev(a)lists.jboss.org
> > https://lists.jboss.org/mailman/listinfo/keycloak-dev
> >
>
> --
> Bill Burke
> JBoss, a division of Red Hat
> http://bill.burkecentral.com
> _______________________________________________
> keycloak-dev mailing list
> keycloak-dev(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-dev
--
abstractj
_______________________________________________
keycloak-dev mailing list
keycloak-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-dev
3623
days inactive
3623
days old
6 comments
3 participants
participants (3)
-
Bill Burke -
Bruno Oliveira -
Stian Thorgersen