Hi Mike, have you found the answer? I am experiencing the same issue. :/
On Tuesday, 26 April 2016 21:08:50 UTC+1, Mike Richards wrote: > > Hello, > > I'm attempting to configure throttling for a 4.2 installation. As the 4.2 > documentation > <http://jasig.github.io/cas/4.2.x/installation/Configuring-Authentication-Throttling.html> > > appears to be incomplete I've tried to use the 4.1 documentation > <http://jasig.github.io/cas/4.1.x/installation/Configuring-Authentication-Throttling.html> > > as a secondary reference. > > I've done the following: > > - Replace <alias name="neverThrottle" alias="authenticationThrottle" > /> with <alias name="inMemoryIpAddressUsernameThrottle" > alias="authenticationThrottle" /> in deployerConfigContext.xml > - Set the following properties in cas.properties (deployed to > /etc/cas) based on the 4.1 docs > - cas.throttle.failure.threshold=5 > - cas.throttle.failure.range.seconds=3 > - cas.throttle.username.parameter=username > > I haven't filled in anything for the following properties; they remain > commented > > - cas.throttle.appcode > - cas.throttle.authn.failurecode > - cas.throttle.audit.query > > > I've tried testing this two ways: > > - 4 browser windows with rapid clicking (all 4 attempts in less than 3 > seconds) > - 25 login attempts via the REST API (POST against /cas/v1/tickets) > > > Both continue to succeed. Can anyone point out what I'm missing? > > Thank you much, > > Mike > -- - CAS gitter chatroom: https://gitter.im/apereo/cas - CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html - CAS documentation website: https://apereo.github.io/cas - CAS project website: https://github.com/apereo/cas --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/7b69c1ce-a890-4e3d-b6cc-f7c86ca1b270%40apereo.org.
