FeministWiki:LDAP Schema: Difference between revisions

FeministWiki:LDAP Schema (view source)

203 bytes added , 2 April 2020

1,084

edits

@@ Line 139: / Line 139: @@
   pwdLockout: TRUE
   pwdLockoutDuration: 3600
-  pwdMaxFailure: 5
+  pwdMaxFailure: 10
+ pwdFailureCountInterval: 3600
   EOF
@@ Line 150: / Line 151: @@
   EOF
-With these settings, five consecutive authentication failures with a username will lock the account for an hour.
+With these settings, ten consecutive authentication failures with a username will lock the account for an hour.  Login failures are also cleared after an hour.  This means it's possible to try ten passwords per hour during a brute-force attack, which won't get the attacker very far.
 === Time of last login ===