roboconf / roboconf-platform

The core modules and the platform
Apache License 2.0
35 stars 11 forks source link

Authentication with Karaf web consoles: attempts limit? #634

Closed vincent-zurczak closed 8 years ago

vincent-zurczak commented 8 years ago

Following #632, can we limit the number of times one can attempt to login? How can we specify a delay before two unsuccessful attempts?

vincent-zurczak commented 8 years ago

This is not up to Roboconf to deal with that.

632 mentions we could delegate authentifcation to an LDAP server. Or to something else. Such a verification policy should thus be handled by these delegates, and not by Roboconf directly.

This will have to be mentioned in the documentation. This is the reason why this issue is kept open for the moment.

vincent-zurczak commented 8 years ago

See http://roboconf.net/en/user-guide-snapshot/security-and-ldap.html