Jump to content

FeministWiki:LDAP Schema: Difference between revisions

Line 140: Line 140:
  pwdLockoutDuration: 3600
  pwdLockoutDuration: 3600
  pwdMaxFailure: 10
  pwdMaxFailure: 10
pwdFailureCountInterval: 3600
  EOF
  EOF
   
   
Line 150: Line 151:
  EOF
  EOF


With these settings, five consecutive authentication failures with a username will lock the account for an hour.
With these settings, ten consecutive authentication failures with a username will lock the account for an hour.  Login failures are also cleared after an hour.  This means it's possible to try ten passwords per hour during a brute-force attack, which won't get the attacker very far.


=== Time of last login ===
=== Time of last login ===