authentication - django-axes not capturing failed login attempt, but captures admin failed attempts fine -
i using django-axes, , using exact same steps described in readme on github. able login , logout fine through django views, none of failed login attempts captured if going throught main website. none less, failed login attempts admin site captured fine. using failedloginmiddleware, , nothing admin specific. have double checked settings , configs, still failing find source of problem. please help.
middleware_classes = ( 'django.middleware.common.commonmiddleware', 'django.contrib.sessions.middleware.sessionmiddleware', 'django.middleware.csrf.csrfviewmiddleware', 'django.contrib.auth.middleware.authenticationmiddleware', 'django.contrib.messages.middleware.messagemiddleware', 'axes.middleware.failedloginmiddleware', ) installed_apps = ( 'django.contrib.auth', 'django.contrib.contenttypes', 'django.contrib.sessions', 'django.contrib.sites', 'django.contrib.messages', 'django.contrib.staticfiles', 'axes', 'django.contrib.admin', ) here projects urls.py:
from django.conf.urls.defaults import patterns, include, url django.contrib.auth.views import login, logout, password_change qs.forms import validatingpasswordchangeform django.contrib import admin admin.autodiscover() urlpatterns = patterns('', (r'^login/$', login, {'template_name': 'auth/login.html'}), (r'^logout/$', logout, {'redirect_field_name': '/login', 'template_name': 'auth/logged_out.html'}), (r'^passw_change/$', password_change, {'post_change_redirect': '/rage', 'template_name': 'auth/password_change.html', 'password_change_form': validatingpasswordchangeform}), (r'^passw_reset/$', 'views.rage_password_reset'), (r'^passw_reset/done/', 'views.rage_password_reset_done'), (r'^passw_reset/(?p<uidb36>[0-9a-za-z]+)-(?p<token>.+)/$', 'views.rage_password_reset_confirm'), (r'^passw_reset/complete/$', 'views.rage_password_reset_complete'), url(r'^$', 'be.views.main.index'), url(r'^admin/', include(admin.site.urls)), )
i can't think of reason why config wouldn't work- use django-axes , setup exact same yours , works fine. however, can force axes log doing following:
change
axes.middleware.failedloginmiddlewareaxes.middleware.failedadminloginmiddlewareinsettings.py. (failedauthloginmiddlewareisn't working you, don't use it.)edit
urls.conf:... django.contrib.auth.views import login, logout, password_change axes.decorators import watch_login ... urlpatterns = patterns('', (r'^login/$', watch_login(login), {'template_name': 'auth/login.html'}), ...
this should force axes log attempts- , doing may shed light on initial issue was.
Comments
Post a Comment