Appserver access log should contain username

[Herb McNew]

Currently there is no way to correlate an action with a particular user. We'd like to have the app server record the username in either the ident or username field of the access log.

[Diogo Matsubara (matsubara)]

Hi Herb,

you mean a log like devpad:/srv/launchpad.net-logs/edge/gangotri/launchpad-access1.log ? If yes, I think 12nd field is the DB id. Does that help or you need it to be the username? Can you explain the use case for having the username there?

Thanks

[Herb McNew (herb)]

Diogo,

It does, in fact, look like the DB id. I think we'd much rather see the LP username in that field though. This is primarily for auditing purposes. Because we don't have any sort of audit log we have to go through the logs to correlate information. Having the username as opposed to the DB id would make that a bit easier on us.

A better solution all around might be some sort of audit log. Maybe something like "<date> User <x> added bug <y> from IP <z>" or "<date>: User <x> changed his password from IP <z>." This sort of thing would be beneficial in several situations. For example, blocking spammers or tracking account compromises.

Regards,
Herb