Difference between revisions of "NF1.0 User Locking"
From iDempiere en
| Line 31: | Line 31: | ||
3. Log out. | 3. Log out. | ||
| + | |||
| + | Login with another user, use password or user incorrect | ||
'''Technical Info:''' [http://jira.idempiere.com/browse/IDEMPIERE-373 IDEMPIERE-373] | '''Technical Info:''' [http://jira.idempiere.com/browse/IDEMPIERE-373 IDEMPIERE-373] | ||
Revision as of 16:43, 8 July 2013
Feature: User Locking
Goal: Security
Sponsor: Trek Global
Description:
This new feature allows implement user locking on some events:
- Maximum account locking in minutes
- Maximum inactive period in days
- Maximum number of login attempts
- Maximum password age in days
These parameters are configured in "System Configurator" window
- USER_LOCKING_MAX_ACCOUNT_LOCK_MINUTES
- USER_LOCKING_MAX_INACTIVE_PERIOD_DAY
- USER_LOCKING_MAX_LOGIN_ATTEMPT
- USER_LOCKING_MAX_PASSWORD_AGE_DAY
How to configure the system to lock the user account at the third failed attempt login:
1. In "System Configuration" window, find record "USER_LOCKING_MAX_LOGIN_ATTEMPT".
2. Set value for field "Configured Value".
* at the third failed attempt, the user account will be locked
3. Log out.
Login with another user, use password or user incorrect
Technical Info: IDEMPIERE-373
