[midPoint] Locked user

[Ivan Noris]

Hi Aivo,

I believe the user will be automatically unlocked in (fixed) 15 or 30
minutes if I remember correctly. Not sure where this is defined.

However, the security policy regarding user locking has been
significantly enhanced in upcoming 3.4 release, (current master) where
you can define your own policy and refer to it in System Configuration.
Admin can also unlock user manually (I tested this a few days ago, e.g.
https://jira.evolveum.com/browse/MID-2606). Current state
(Normal/Locked) is displayed.

The default security policy is included with midpoint, see
https://github.com/Evolveum/midpoint/blob/master/gui/admin-gui/src/main/resources/initial-objects/120-security-policy.xml

Regards,
Ivan

On 04/19/2016 10:49 AM, Aivo Kuhlberg wrote:
>
> When user types his/her password wrong 3 times then there appears
> message "User is locked, please wait." What does that message mean?
> Will the user be automatically unlocked after some period or does
> admin user has to unlock the user?
> Another question is where can admin user see if the user is locked or
> not? Is there possible to change lockout settings (number of tries
> after account locks or use captcha after number of wrong tries)
> I am using midPoint 3.3.1
>
> Thanks,
>
> Aivo Kuhlberg
>
>
> ------------------------------------------------------------------------
> Käesolev e-kiri võib sisaldada asutusesiseseks kasutamiseks
> tunnistatud teavet.
> This e-mail may contain information which is classified for official use.
>
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint

-- 
  Ing. Ivan Noris
  Senior Identity Management Engineer & IDM Architect
  evolveum.com                     evolveum.com/blog/
  ___________________________________________________
  "Semper ID(e)M Vix."

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20160419/0e624a94/attachment.htm>