Hi,
I was setting up login throttling today in RC3 of CAS4. I was looking at the
documentation located at the very bottom of:
http://jasig.github.io/cas/installation/Configuring-Authentication-Components.html
The documentation should be updated to show that the cas-servlet entry needs a
list tag added to it like:
<bean id="loginFlowHandlerMapping"
class="org.springframework.webflow.mvc.servlet.FlowHandlerMapping"
p:flowRegistry-ref="loginFlowRegistry"
p:order="2">
<property name="interceptors">
<list>
<ref
local="localeChangeInterceptor" />
<ref local="loginThrottle" />
</list>
</property>
</bean>
Also I set my login throttle to 5 login (p:failureThreshold="5" ) per 10
minutes (p:failureRangeInSeconds="600")
per username, and it seemed to kick in after two incorrect attempts not 5. Any
thoughts?
Thanks,
Nancy
--
You are currently subscribed to cas-dev@lists.jasig.org as:
arch...@mail-archive.com
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-dev
