auth.user.allowed-failures-per-period

Specifies the maximum number of failed login attempts per period.

Key: auth.user.allowed-failures-per-period
Type: Integer
Can be set in: global.cfg

Description

Set the allowed number of failed authentications per period (see auth.user.allowed-failures-period-length-seconds) per username. If a user has exceeded the allowed failures within the period a delay defined by auth.user.delay-length-seconds) will be applied to subsequent authentication attempts to make brute force password guessing impractical.

Note that this value is read only when Funnelback’s web server is started. After modifying the value, the web server must be restarted for the change to take effect.

Default Value

Permit the user ten login attempts before any warning is logged.

auth.user.allowed-failures-per-period=10

Examples

Permit the user five login attempts before any warning is logged.

auth.user.allowed-failures-per-period=5

© 2015- Squiz Pty Ltd