Login attemp & user lockout

Hello,
I need some help with the following questions:
1. Is there a mechanism in TS to lock out a user after n number of attempted login. This is not a session expiration for no-activity.
2. Is there a way to lock-out the user for certain period of time (e.g. 15min) after several failed login attempt?

In both cases, only admin can then enable that user again from Admin UI.

Thanks.
-Oscar

System:
IW TS 6.7 on Windows 2K3 Advanced Server

Find more posts tagged with

Comments

motlnt

The only way I can think of is using LDAP or similar system do that.We have integrated teamsite to use LDAP and after 4 failed attempts it locks out the user.

==========
Interwoven certified consultant
TS 6.7.1 on RedHat Linux
Lets make Earth GREEN

moonkhanna

Same applies to ADS as well

motlnt

The only way I can think of is using LDAP or similar system do that.We have integrated teamsite to use LDAP and after 4 failed attempts it locks out the user.

Forgot to mention that if you use LDAP or similar external system then you need to ask admin of those systems to unlock the user a/c and you can not use the Teamsite admin UI to do that.

==========
Interwoven certified consultant
TS 6.7.1 on RedHat Linux
Lets make Earth GREEN

chicka

To decrease the burden of an Administrator, you can go for autounlock script integrating with LDAP. We have implemented this and also governs the digital security team's norms.

oscarz

If using LDAP or AD, locking out user means we have to have "write" access to the LDAP/AD. What if we don't have that right?
What if we use LDAP only for authentication, but TS still handle the authorization. Will the roles be stored in roles xml file?

Really appreciate everyone's help.

Thanks.
-Oscar

Rashmi123

Hi

LDAP is a external Database maintained with addition with team site. We can maintain a database of user id,password for the user in Ldap.If the user is succcessful to login into Ldap than according to that , the request can be sent to teamsite server from LDAP server stating that user login is successful and he can be permmited to log in.

In this way we can also be able to write a script that if the login is faliure than the user id is blocked or as we may seem perfect but still the main controls lies with teamsite authentication/roles.

RM