> The documentation should be updated to show that the cas-servlet entry needs
> a list tag added to it

Thanks for pointing that out.

> Also I set my login throttle to 5 login (p:failureThreshold="5" ) per 10
> minutes (p:failureRangeInSeconds="600")

Throttling is applied based on the rate determined by
num_attempts/delta_time, so if two subsequent failures occur above the
threshold rate the throttle kicks in. This is a subtle but important
policy detail that we may need to document more clearly. Suggestions
for clearer documentation welcome.

M

-- 
You are currently subscribed to cas-dev@lists.jasig.org as: 
arch...@mail-archive.com
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-dev

Reply via email to