ubccr / mokey

FreeIPA self-service account management portal
BSD 3-Clause "New" or "Revised" License
189 stars 45 forks source link

Opportunity to block a list of users #83

Closed mmorgotti closed 1 year ago

mmorgotti commented 3 years ago

Hi,

do you think it could be possible to add the opportunity to define a list of user in the configuration file that should not be able login through mokey even though they are defined in FreeIPA? Since the mokey portal can be exposed to the internet it would be useful to protect privileged users such as administrators from any kind of brute force attempt (and consequent risk of lockout...) by making them 'not existing' withing mokey.

Kind Regards, Marcello