Alfonso, Your configuration and investigation show that throttling is a ratio. Threshold is number of attempts during the range. With threshold being greater than range, anything more than one attempt will fail. Try 1 attempt in 5 seconds (or however long it takes a human to retype a password). threshold=1 rangeSeconds=5
If user types bad username/password more than once in 5 seconds, throttle. Ray On Wed, 2019-09-25 at 10:28 -0700, Alfonso Vera wrote: Hi folks I 'm trying to get authentication throttling to work We read the doc: * failureRangeInSeconds: Period of time in seconds during which the threshold applies. * failureThreshold: Number of failed login attempts permitted in the above period. but second attempt always triggers 'access denied' like: https://groups.google.com/a/apereo.org/d/msg/cas-user/EkS2Jg06Vgo/JbxeLNVnAQAJ Later we readed: https://groups.google.com/a/apereo.org/d/msg/cas-user/EkS2Jg06Vgo/JbxeLNVnAQAJ "secondsBetweenConsecutiveFailures" and https://github.com/apereo/cas/blob/master/support/cas-server-support-throttle-core/src/main/java/org/apereo/cas/web/support/AbstractThrottledSubmissionHandlerInterceptorAdapter.java thresholdRate = (double) this.failureThreshold / this.failureRangeInSeconds cas.authn.throttle.usernameParameter=username cas.authn.throttle.schedule.startDelay=PT10S cas.authn.throttle.schedule.repeatInterval=PT20S cas.authn.throttle.appCode=CAS cas.authn.throttle.failure.threshold=1000 cas.authn.throttle.failure.code=AUTHENTICATION_FAILED cas.authn.throttle.failure.rangeSeconds=60 I'm confusing, Really how does it work? I can't find the meaning of cas.authn.throttle.schedule.startDelay=PT10S cas.authn.throttle.schedule.repeatInterval=PT20S Any kind of help will be appreciated -- Ray Bon Programmer Analyst Development Services, University Systems 2507218831 | CLE 019 | [email protected]<mailto:[email protected]> I respectfully acknowledge that my place of work is located within the ancestral, traditional and unceded territory of the Songhees, Esquimalt and WSÁNEĆ Nations. -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/cb3ea3580b3a504c5d40d7e18ef203164fce048b.camel%40uvic.ca.
