topic Implementing Account Lockout feature in Alfresco in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/implementing-account-lockout-feature-in-alfresco/m-p/286766#M239896 <HTML><HEAD></HEAD><BODY><SPAN>Is it possible to set Account Lockout in Alfresco. i.e, if a user tries to login unsuccessfully 3 consecutive times, his account should be disabled for say, 24 hrs. Is it possible to set this in Alfresco Community 3.4.e?</SPAN><BR /><BR /><SPAN>If not, please let me know if we can implement the same using java web scripts.</SPAN><BR /><BR /><SPAN>Please help. This is a really urgent requirement, about which I am not able to find much online.</SPAN></BODY></HTML> Wed, 01 Jan 2014 10:43:38 GMT nimmigeorge 2014-01-01T10:43:38Z Implementing Account Lockout feature in Alfresco https://connect.hyland.com/t5/alfresco-archive/implementing-account-lockout-feature-in-alfresco/m-p/286766#M239896 Is it possible to set Account Lockout in Alfresco. i.e, if a user tries to login unsuccessfully 3 consecutive times, his account should be disabled for say, 24 hrs. Is it possible to set this in Alfresco Community 3.4.e?If not, please let me know if we can implement the same using java web scripts.P Wed, 01 Jan 2014 10:43:38 GMT https://connect.hyland.com/t5/alfresco-archive/implementing-account-lockout-feature-in-alfresco/m-p/286766#M239896 nimmigeorge 2014-01-01T10:43:38Z Re: Implementing Account Lockout feature in Alfresco https://connect.hyland.com/t5/alfresco-archive/implementing-account-lockout-feature-in-alfresco/m-p/286767#M239897 <HTML><HEAD></HEAD><BODY><SPAN>Hello,</SPAN><BR /><BR /><SPAN>We have a solution that adds a bunch of login-related possibilities:</SPAN><BR /><A href="http://www.slideshare.net/zaiziltd/securing-alfresco-for-extranet-access" rel="nofollow noopener noreferrer">http://www.slideshare.net/zaiziltd/securing-alfresco-for-extranet-access</A><BR /><SPAN>Our current solution is for 4.1 but I guess we could backport it to 3.4 if needed.</SPAN><BR /><SPAN>However, it's a commercial solution so I'm afraid I can't disclose much of the code.</SPAN><BR /><BR /><SPAN>Here are the great lines for that specific functionality:</SPAN><BR /><SPAN>- Some extra metadata on the user</SPAN><BR /><SPAN>- An interceptor on the login</SPAN><BR /><BR /><SPAN>However, I must advise against the 24h. At least without the way to clear the blocking manually (which I wouldn't recommend either if you want to keep an&nbsp; happy administrator).</SPAN><BR /><SPAN>The main problem being: I can easily block an account that isn't mine by failing its password three times.</SPAN><BR /><BR /><SPAN>Regards</SPAN></BODY></HTML> Thu, 02 Jan 2014 10:23:30 GMT https://connect.hyland.com/t5/alfresco-archive/implementing-account-lockout-feature-in-alfresco/m-p/286767#M239897 scouil 2014-01-02T10:23:30Z