[opencms-dev] Admin user blocked for how long?

[Mario Jäger]

Hi Christian, Hi Christoph,

per default an user is disabled for 15 minutes after three bad attempts. But you can 
configure this in the opencms-system.xml. Between the nodes <validationhandler> and
<sites> you can configure the node <loginmanager>. In the following example an user
is disabled for 20 minutes after five bad attempts:

<loginmanager>
  <disableMinutes>20</disableMinutes>
  <maxBadAttempts>5</maxBadAttempts>
</loginmanager>


A blocked user has to wait the configured time in <disableMinutes>, before he can login 
again. 

If you want to switch off that an user is disabled after bad attempts, you have to set 
the value in <maxBadAttempts> to -1.

-- 
Kind Regards,
Mario.
 
-------------------
Mario Jäger
 
Alkacon Software GmbH  - The OpenCms Experts                    
http://www.alkacon.com - http://www.opencms.org            


Christian Steinert schrieb:
> Christoph P. Kukulies wrote:
>   
>> When login attempts fail (OpenCms 7.5.0) the account will be blocked, at
>> least the dialog says so.
>>
>> How long lasts this blocking ?
>>   
>>     
> I *think* 20 minutes, but I am not sure
>   
>> How can one reset the blocking immediately? A flag in the database?
>>   
>>     
> This, I sadly don't know
>
> Kind regards and good luck
> Christian
>
> _______________________________________________
> This mail is sent to you from the opencms-dev mailing list
> To change your list options, or to unsubscribe from the list, please visit
> http://lists.opencms.org/mailman/listinfo/opencms-dev
>