I am using tomcat 3.2.1 + form-based authentication + jdbcRealm with oracle 
database. Everything has been configured and works perfect.

Now I have a requirement to lock a user account upon 3 consecutive login 
attempt failures. The user then needs to contact the application 
administrators to get their account unlocked.

I have tried searching this mailing list's archives with no luck. In 
form-based auth my login.jsp page has a html form that is submitted to 
j_security_check handled by the container. So I have no control it and so 
not able to count the number of login failures. Any help appreciated!

Rajesh
_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, email: [EMAIL PROTECTED]

Reply via email to