Failed login lockout protection in FreeRADIUS
a.cudbardb at freeradius.org
Fri Sep 14 15:24:37 CEST 2012
On 14 Sep 2012, at 13:57, mr. s <sigasecure at gmail.com> wrote:
> I was reading an article in computer world comparing a few RADIUS servers.
> It said that FreeRADIUS had "failed login lockout protection", however I can't find that particular verbiage in the FreeRADIUS documentation, FAQ or HowTos.
> Can anyone point me to what this may be referring to or clear up my confusion.
Well the server doesn't explicitly implement this. You could use something like SQL/Redis xlat to maintain a failed login counter for each user.
There's delay reject, but that's not the same thing. That just means the server will wait X seconds before responding with an Access-Reject.
More information about the Freeradius-Users