For edification, what its worth.. Heres the question asked by the author of the article, I was referring to, and the answer from Alan D. --<div><br></div><div><p style="color:rgb(80,0,80);font-size:13px;font-family:arial,sans-serif">
Here’s my question and response from Alan T DeKok <a href="mailto:aland@freeradius.org" style="color:rgb(17,85,204)" target="_blank">aland@freeradius.org</a> about this. You can check with him on more details if needed or send to the mailing list.<u></u><u></u></p>
<p style="color:rgb(80,0,80);font-size:13px;font-family:arial,sans-serif"><u></u> <u></u></p><p style="color:rgb(80,0,80);font-size:13px;font-family:arial,sans-serif">
>> Does FR support an account lockout feature to block users after so many failed password attempts?<u></u><u></u></p><p style="color:rgb(80,0,80);font-size:13px;font-family:arial,sans-serif">
<u></u> <u></u></p><p style="color:rgb(80,0,80);font-size:13px;font-family:arial,sans-serif"> Yes. It's not enabled in the default configuration, but you can make<u></u><u></u></p><p style="color:rgb(80,0,80);font-size:13px;font-family:arial,sans-serif">
*any* policy decision based on *any* data source, including logs.</p><p style="color:rgb(80,0,80);font-size:13px;font-family:arial,sans-serif"><br></p><p style="color:rgb(80,0,80);font-size:13px;font-family:arial,sans-serif">
<br></p><div class="gmail_quote"><br></div><div class="gmail_quote">Cheers -</div><div class="gmail_quote"><br></div><div class="gmail_quote">On Fri, Sep 14, 2012 at 10:25 AM, Marinko Tarlać <span dir="ltr"><<a href="mailto:mangia81@gmail.com" target="_blank">mangia81@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Nice option but please keep in mind that suspended routers can behave like a brute force attacker and you'll lock them too.<div>
<div><br>
<br>
On 14.9.2012 15:36, Phil Mayers wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
On 14/09/12 13:57, mr. s wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Hello,<br>
<br>
I was reading an article in computer world comparing a few RADIUS servers.<br>
<br>
It said that FreeRADIUS had "failed login lockout protection", however I<br>
can't find that particular verbiage in the FreeRADIUS documentation, FAQ<br>
or HowTos.<br>
</blockquote>
<br>
What are you asking here? How to lock out a user after X failed logins?<br>
-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/<u></u>list/users.html</a><br>
<br>
</blockquote>
<br>
-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/<u></u>list/users.html</a><br>
</div></div></blockquote></div><br></div>