Revision as of 17:42, 8 July 2013

Feature: User Locking

Goal: Security

Sponsor: Trek Global

Description:

This new feature allows implement user locking on some events:

These parameters are configured in "System Configurator" window

How to configure the system to lock the user account at the third failed attempt login:

1. In "System Configuration" window, find record "USER_LOCKING_MAX_LOGIN_ATTEMPT".

2. Set value for field "Configured Value".

* at the third failed attempt, the user account will be locked

3. Log out.

Login with another user, use password or user incorrect.

Trtry to log in for the fourth time and the system will ask you to contact your system administrator to unlock user's account.

Log in with "GardenAdmin". Use the "Reset Locked Account" process to unlock the user account.

* Now the user will be able to log in.

Technical Info: IDEMPIERE-373

@@ Line 20: / Line 20: @@
 * USER_LOCKING_MAX_LOGIN_ATTEMPT
 * USER_LOCKING_MAX_PASSWORD_AGE_DAY
+== Maximum Login Attempts ==
 '''How to configure the system to lock the user account at the third failed attempt login:'''
@@ Line 50: / Line 52: @@
 [[File:Screenshot19.png]]
   * Now the user will be able to log in.
+== Maximum Password Age ==
+== Maximum Inactive Period ==
 '''Technical Info:''' [http://jira.idempiere.com/browse/IDEMPIERE-373 IDEMPIERE-373]
 [[Category:New Features v0.01|S]]