Hi,
CAS enables login throttling by IP, but, what if a relatively big number of
users (in an organization) all sit behind one proxy?
Can I configure throttling like this: no more than 5 login failures within
3 seconds, and decrement the count every second.
Thx!
Yan
<bean id="loginThrottle"
class="org.jasig.cas.web.support.InMemoryThrottledSubmissionByIpAddressHandlerInterceptorAdapter"
p:failureRangeInSeconds="3"
p:failureThreshold="5" />
<bean id="loginThrottleJobDetail"
class="org.springframework.scheduling.quartz.MethodInvokingJobDetailFactoryBean"
p:targetObject-ref="loginThrottle"
p:targetMethod="decrementCounts"/>
<!-- A scheduler that drives all configured triggers is provided by default
in applicationContext.xml. -->
<bean id="loginThrottleTrigger"
class="org.springframework.scheduling.quartz.SimpleTriggerFactoryBean"
p:jobDetail-ref="loginThrottleJobDetail"
p:startDelay="1000"
p:repeatInterval="1000"/>
Thx!
Yan
--
- CAS gitter chatroom: https://gitter.im/apereo/cas
- CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html
- CAS documentation website: https://apereo.github.io/cas
- CAS project website: https://github.com/apereo/cas
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/d4e3c159-6454-4c7c-9a92-a4180bb99540%40apereo.org.
