Changing maximum failed attempts allowed.

Question

Hi,

First of all, what a great product! However, I do have some questions, I tried searching for the answers but I couldn't find any relevant information.

How do I change the maximum failed login attempts allowed from the web (we've already set the brute force options)? At the moment it's set to 100, and I'd like to set it to something lower. And is there an option to change the error message on the login-page?

Best regards,
Tommi

Answer 1

Hello,

How do I change the maximum failed login attempts allowed from the web (we've already set the brute force options)?

For this purpose, you need to configure password policies used in your AD domain(s). If you use Fine-grained Password Policies, see the following help article for information on how to edit Password Policies: http://www.adaxes.com/help/?HowDoI.Mana ... olicy.html.

If you don't use Fine-grained Password Policies, you need to set up the Default Domain Password Policy that is applied to the whole domain. For information on how to edit it, see the above help article. On step 4 of the article, select the Default Domain Password Policy and click Edit.

And is there an option to change the error message on the login-page?

No, it is generated "on the fly".

Comments

Thank you, it worked! Are you guys planning on removing the numbers of attempts from the error message? I don't like exposing this information to the user unless absolutely necessary.

---

Hello,

Can you explain why it is so important for you? We don't quite get the purpose of doing so :)

---

Hello,

Starting from Adaxes 2014.1 released yesterday, you can configure Adaxes not to show the reason of a login failure and the number of login attempts left when a login error occurs. You can download the latest build here.

Upgrade Instructions.

For a complete list of new features and improvements, see What's New.

To configure Adaxes not to show the number of login attempts left:

1. On the computer, where the Web Interface is installed, start the Web Interface Customization tool.
2. In the Interface type drop-down list, select the Web Interface you want to configure.
3. Activate the Sign In tab.
   
4. Click the Configure Protection Options button.
   
5. Check the When a login error occurs, do not show the reason and the number of login attempts left option.