auth.user.allowed-failures-period-length-seconds

Background

Set the period over which failed login attempts are tracked (see auth.user.allowed-failures-per-period) per username. If a user has exceeded the allowed failures within the period a delay defined by auth.user.delay-length-seconds) will be applied to subsequent authentication attempts to make brute force password guessing impractical.

Note that this value is read only when Funnelback’s web server is started. After modifying the value, the web server must be restarted for the change to take effect.

Setting the key

Set this configuration key in the server configuration.

Use the configuration key editor to add or edit the auth.user.allowed-failures-period-length-seconds key, and set the value. This can be set to any valid Integer value.

Default value

Track authentication failures over a 5 minute period.

auth.user.allowed-failures-period-length-seconds=300

Examples

Track authentication failures over a 60 second period.

auth.user.allowed-failures-period-length-seconds=60