The threshold is actually a ratio. 3 tries in 30 seconds is 0.1 try per second, so if you fail more than 0.1 per second you get throttled. Fail twice in 5 seconds (0.4 ratio) and you're throttled.
> On 26 Sep 2019, at 14:13, Albert Cabello Sanchez <[email protected]> wrote: > > In my experience, what the doc says is not true. > > You can configure 3 tries in 30 seconds, but the actual threshold will be > one try in 10 seconds. > > Regards. > > ----- Original Message ----- > > Hi folks > > I 'm trying to get authentication throttling to work > > We read the doc: > > - failureRangeInSeconds: Period of time in seconds during which the > threshold applies. > - failureThreshold: Number of failed login attempts permitted in the > above period. > > > -- > Alberto Cabello Sánchez > Universidad de Extremadura > > -- > - Website: https://apereo.github.io/cas > - Gitter Chatroom: https://gitter.im/apereo/cas > - List Guidelines: https://goo.gl/1VRrw7 > - Contributions: https://goo.gl/mh7qDG > --- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/1265644659.376934.1569499982071.JavaMail.zimbra%40unex.es. Patrick PRONIEWSKI -- Chef du Service Opérations - DSI - Université Lumière Lyon 2 Responsable Sécurité des Systèmes d'Information -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/6E6A5411-EBB8-4C2B-BDBD-F43BD335CF29%40univ-lyon2.fr.
