Hi everybody

I am having a really hard time configuring Throttling with REST Protocol

*https://apereo.github.io/cas/development/protocol/REST-Protocol.html* 
<https://apereo.github.io/cas/development/protocol/REST-Protocol.html>

here it says "The REST endpoint may become a tremendously convenient target 
for brute force dictionary attacks on CAS server. Consider enabling 
throttling support to ensure brute force attacks are prevented upon 
authentication failures."

if I enable the throttling properties in cas.properties it works only for 
web attempts

it also says "By default, throttling REST requests is turned off."

but there is not mention about how to turn it on !!!

am I missing something ?

Thank you in advance

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/ff156b94-2d5f-407f-83c3-6fc8d6f733c6%40apereo.org.

Reply via email to