IDOL Category Component 24.2

# Set Maximum Login Attempts

To protect against brute force attacks on user accounts, you can configure the IDOL Community component to lock user accounts when there are too many incorrect login attempts within a specified time period.

To set a maximum number of login attempts

1. Open the IDOL Community component configuration file in a text editor.

2. Find the `[User]` section, or create one if it does not exist.

3. Set the `LoginMaxAttempts` parameter to the maximum number of incorrect login attempts to allow in the time period.

4. Set the `LoginExpiryTime` parameter to the time (in seconds) before the current number of login attempts resets. Community locks the user account if there are too many incorrect login attempts within this time period. For example:

       LoginMaxAttempts=3
       LoginExpiryTime=60

   In this example, the user account locks if there are three incorrect login attempts within 60 seconds of each other.

5. To automatically unlock users, set the `LockRemovalDuration` parameter to the length of time that the user remains locked. For example:

       LockRemovalDuration=24hours

   Set `LockRemovalDuration` to `-1` to disable it.

6. Save and close the configuration file.

7. Restart the IDOL Community component for your changes to take effect.

8. Notify your users of your password and PIN policies.

Users must contact a system administrator to unlock their accounts, unless you configure the `LockRemovalDuration` parameter.

Copyright 2024 Open Text
Version 24.2 | Last updated March 2024

Send documentation feedback

Close

Send documentation feedback

To send feedback using your default email client, open an email window.

Otherwise, send your feedback and the information below to MFI-swpdl.idoldocsfeedback@opentext.com.

We appreciate your feedback!

Product: IDOL IDOL Category Component 24.2

Topic Title: Set Maximum Login Attempts