Login - Lock Mechanism

Overview

1. Starting in 4.2.5, if a certain number of login attempts happen within a certain duration, the system disables the user

2. The account will become enabled automatically after a long period of time if disabled by lockout

Implementation:

Configuration

Set Parameters on Intigua.Properties File :

# number of failure attempts until locking
system.login.lock.num-attempts=5
# period of time for the failures to occur in order to lock the account
system.login.lock.failure-check.duration.min=5
# automatically unlock after the period
system.login.lock.duration.min=600