> Do I include the following in cas-servlet.xml: No, it's either/or. If you did #1, you don't need to do #2. #1 is the correct step for modern CAS versions.
> Where do I set the login attempt threshold? In the interceptor bean in throttleInterceptorTrigger.xml: <bean id="throttleInterceptor" class="org.jasig.cas.web.support.InMemoryThrottledSubmissionByIpAddressAndUsernameHandlerInterceptorAdapter" /> Needs the properties Scott mentioned previously: - p:failureRangeInSeconds="120" - p:failureThreshold="100" M -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
