Lockout-Duration; Max-Login-Failure - IBM WebSphere XS40 Command Reference Manual

Datapower xml security gateway
Table of Contents

Advertisement

Examples
v Sets the LDAP load balancer to LBGroup1.

lockout-duration

Specifies the duration to lock out the local account.
Syntax
lockout-duration minutes
Parameters
minutes
Guidelines
The lockout-duration command specifies the duration to lock out an account in
minutes after exceeding the permitted number of failed login attempts defined by
the max-login failure command. Instead of locking out an account for a specific
duration, the account can be locked out until re-enabled by a privileged
administrator. To lock out accounts until reset, set the duration to 0.
Note: The lockout-duration commands applies to all accounts including the admin
Related Commands

max-login-failure

Examples
v Enables lockout behavior for accounts that on the fifth login failure, the account
max-login-failure
Whether to lock out a local user account after a specific number of failed login
attempts.
Syntax
max-login-failure count
596
Command Reference
# au-method ldap
# loadbalancer-group LBGroup1
# au-ldap-serach on
# au-ldap-bind-dn proxyuser
# au-ldap-bind-password p@Ssw0rd
#
Specifies the number of minutes to lock out an account after exceeding the
maximum number of failed login attempts. A value of 0 indicates that
accounts are locked out until reset by a privileged administrator. Use an
integer in the range of 0 through 1000. The default is 1.
account. The only difference is that the admin account cannot be locked out
until reset. When the duration is 0, the admin account is locked out for 120
minutes or until re-enabled by another administrator.
is locked out locked out until reset by a privileged administrator:
# lockout-duration 0
# max-login-failure 4

Advertisement

Table of Contents
loading

Table of Contents