Failed login lockout protection in FreeRADIUS

[Arran Cudbard-Bell]

On 14 Sep 2012, at 13:57, mr. s <sigasecure at gmail.com> wrote:

> Hello,
> 
> I was reading an article in computer world comparing a few RADIUS servers. 
> 
> It said that FreeRADIUS had "failed login lockout protection", however I can't find that particular verbiage in the FreeRADIUS documentation, FAQ or HowTos.
> 
> Can anyone point me to what this may be referring to or clear up my confusion.

Well the server doesn't explicitly implement this. You could use something like SQL/Redis xlat to maintain a failed login counter for each user.

There's delay reject, but that's not the same thing. That just means the server will wait X seconds before responding with an Access-Reject.

-Arran