id	summary	reporter	owner	description	type	status	priority	milestone	component	resolution	keywords	cc	parents
5460	Log IP address when a user enters a wrong password	Elinvention		"If I try to login with a wrong password, this message is logged:

{{{WARNING:mediagoblin.auth.tools:Wrong password for u'elinvention'}}}

I'd like to set up fail2ban for Mediagoblin, but without IP address I can't do much...

A message like this would be better:

{{{WARNING:mediagoblin.auth.tools:Wrong password for u'elinvention' from xxx.xxx.xxx.xxx}}}
"	enhancement	closed	minor	0.10.0	programming	fixed	logging, small