Feature request: add check for alerting frequent horizon unsuccessful login attempt

Antrii, isn't it more logical to modify this bug for Keystone?

IMHO: keystone serving much more services than just console logins. adding that check for keystone can have big number "false positive" because of proxies and another services on the same IP.

as former Paranoid i prefer both checks, and even more -- anomaly detection for login attempts. But it is Overhead for such case.

I doubt that OpenStack services will often go with wrong credentials to compose that big number of false positives you're mentioning.

This is a major functionality and it should not live a in a bugreport. Please work with Sheena Gregson on developing new features.

There is also bugreport https://bugs.launchpad.net/fuel/+bug/1509986. I was thinking about marking this bugreport as a duplicate of it, but here we talk about banning users after failed attempts, not about limiting the number of (potentially malicious) requests.

I am marking the bug as won't fix.

This is feature request in fact but also security issue / bug, comparing to what alternative platforms offer out of the box. Not sure about approach taken on the Stacklight side, this type of attack could be also possible (theoretically) with the help of Ceilometer alarming service and CADF.

Update to previous comment:
Detection of this type attack should be possible also with the help of Ceilometer alarming service and CADF (at least in theory).