Implementing Account Lockout feature in Alfresco

[nimmigeorge]

Is it possible to set Account Lockout in Alfresco. i.e, if a user tries to login unsuccessfully 3 consecutive times, his account should be disabled for say, 24 hrs. Is it possible to set this in Alfresco Community 3.4.e?

If not, please let me know if we can implement the same using java web scripts.

Please help. This is a really urgent requirement, about which I am not able to find much online.

[scouil]

Hello,

We have a solution that adds a bunch of login-related possibilities:
http://www.slideshare.net/zaiziltd/securing-alfresco-for-extranet-access
Our current solution is for 4.1 but I guess we could backport it to 3.4 if needed.
However, it's a commercial solution so I'm afraid I can't disclose much of the code.

Here are the great lines for that specific functionality:
- Some extra metadata on the user
- An interceptor on the login

However, I must advise against the 24h. At least without the way to clear the blocking manually (which I wouldn't recommend either if you want to keep an  happy administrator).
The main problem being: I can easily block an account that isn't mine by failing its password three times.

Regards