Hi, CAS enables login throttling by IP, but, what if a relatively big number of users (in an organization) all sit behind one proxy?
Can I configure throttling like this: no more than 5 login failures within 3 seconds, and decrement the count every second. Thx! Yan <bean id="loginThrottle" class="org.jasig.cas.web.support.InMemoryThrottledSubmissionByIpAddressHandlerInterceptorAdapter" p:failureRangeInSeconds="3" p:failureThreshold="5" /> <bean id="loginThrottleJobDetail" class="org.springframework.scheduling.quartz.MethodInvokingJobDetailFactoryBean" p:targetObject-ref="loginThrottle" p:targetMethod="decrementCounts"/> <!-- A scheduler that drives all configured triggers is provided by default in applicationContext.xml. --> <bean id="loginThrottleTrigger" class="org.springframework.scheduling.quartz.SimpleTriggerFactoryBean" p:jobDetail-ref="loginThrottleJobDetail" p:startDelay="1000" p:repeatInterval="1000"/> Thx! Yan -- - CAS gitter chatroom: https://gitter.im/apereo/cas - CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html - CAS documentation website: https://apereo.github.io/cas - CAS project website: https://github.com/apereo/cas --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscr...@apereo.org. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/d4e3c159-6454-4c7c-9a92-a4180bb99540%40apereo.org.