view mod_audit_user_accounts/README.md @ 5748:dfbced5e54b9

mod_audit_auth: Ignore FAST authentication events by default FAST is more like a cookie that allows linking new connections to a previous (e.g. password) authentication. Since we assume that FAST tokens are secure (not user generated) and not shareable, it reduces a lot of noise by filtering out uninteresting authentication events.
author Matthew Wild <mwild1@gmail.com>
date Fri, 01 Dec 2023 11:34:52 +0000
parents 628952e4ff47
children
line wrap: on
line source

---
summary: Store user account lifecycle events in the audit log
rockspec:
  dependencies:
  - mod_audit
...

This module stores events related to user accounts in the audit log. Events
include:

- New user registered via IBR (user-registered)
- User deleted their account via IBR (user-deregistered)
- User requested deletion of their account (i.e. when a grace period is set) (user-deregistered-pending)
- User account disabled
- User account enabled

There are no configuration options for this module. It depends on mod_audit.