My company recently had an internal pen test and one of the findings was the login message on the nagios log server. If you try logging in with a user that does not exist you receive the message "The username specified does not exist." When you try logging in with a user that does exist you receive the message "Username or password was incorrect for user: nagiosadmin."
Is there a way to change this to display "Invalid username or password." for all login issues like Nagios XI does.
Possible to change login failure message?
-
scottwilkerson
- DevOps Engineer
- Posts: 19396
- Joined: Tue Nov 15, 2011 3:11 pm
- Location: Nagios Enterprises
- Contact:
Re: Possible to change login failure message?
Yes, thanks for pointing this out. This will be added in the future to the 2.1.1 release.