Hi folks I 'm trying to get authentication throttling to work
We read the doc: - failureRangeInSeconds: Period of time in seconds during which the threshold applies. - failureThreshold: Number of failed login attempts permitted in the above period. *but **second attempt always triggers 'access denied' * like: https://groups.google.com/a/apereo.org/d/msg/cas-user/EkS2Jg06Vgo/JbxeLNVnAQAJ Later we readed: https://groups.google.com/a/apereo.org/d/msg/cas-user/EkS2Jg06Vgo/JbxeLNVnAQAJ *"secondsBetweenConsecutiveFailures"* and https://github.com/apereo/cas/blob/master/support/cas-server-support-throttle-core/src/main/java/org/apereo/cas/web/support/AbstractThrottledSubmissionHandlerInterceptorAdapter.java thresholdRate = (double) this.failureThreshold / this.failureRangeInSeconds cas.authn.throttle.usernameParameter=username cas.authn.throttle.schedule.startDelay=PT10S cas.authn.throttle.schedule.repeatInterval=PT20S cas.authn.throttle.appCode=CAScas.authn.throttle.failure.threshold=1000 cas.authn.throttle.failure.code=AUTHENTICATION_FAILED cas.authn.throttle.failure.rangeSeconds=60 I'm confusing, Really how does it work? I can't find the meaning of cas.authn.throttle.schedule.startDelay=PT10S cas.authn.throttle.schedule.repeatInterval=PT20S Any kind of help will be appreciated -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/bb8449bc-28b1-480c-ac49-61650ce189c8%40apereo.org.
