Questions tagged [lockout]

26 questions
6
votes
4 answers

Locking out a user in an ASP .Net Custom Membership Provider

I've had to create a custom membership provider for my current ASP .Net project in order to fit in with our database schema, and am having problems configuring it to lockout a user if they get their password wrong three times, as is supported by the…
RSlaughter
  • 1,191
  • 3
  • 11
  • 23
6
votes
3 answers

MVC 5 Identity 2.0 lockout doesn't work

I need to block a user permanently. I don't understand why this code is not working. This line UserManager.IsLockedOut(user.Id); always returns false instead of true. Maybe it's necessary to put this line UserManager.UserLockoutEnabledByDefault =…
Alexander
  • 691
  • 1
  • 11
  • 29
5
votes
6 answers

PHP client PIN security

I'm currently developing a system which has a functionality where clients can view details of their purchases/renewals/etc by supplying a PIN "number". A PIN is being used instead of login information because of the type of clients we're targeting.…
Christian
  • 27,509
  • 17
  • 111
  • 155
3
votes
3 answers

Lock windows desktop from Java after timeout

I want my java app to lock the windows desktop after a specific timeout. I have a timer which works fine, but I can't seem to execute the command to lock the workstation. javax.swing.Timer tim = new javax.swing.Timer(1000, new ActionListener() { …
Daisetsu
  • 4,846
  • 11
  • 50
  • 70
2
votes
0 answers

Detect that TPM Dictionary Attack Reset has been done

Is there a way to detect from code that a dictionary attack reset has been attempted, but with the wrong lockoutAuth value? I can detect that the TPM is in lockout by checking to see if failedTries == maxTries. I cant seem to find a way to know…
B Lewis
  • 21
  • 2
1
vote
1 answer

Add toomanyattempts in my login controller in laravel

I need to add the functionality that toomanyloginattempts with my login . now its not working. Iam using Laravel Framework 5.1.45 (LTS). The code that i used is mentioned below. My controller function is
1
vote
1 answer

How do I change the max failed login attempts to lock out the user in Weblogic 10.0?

We have a requirement to set the number of login attempts to 3 before we lock out the user. It seems the default is 5. How do I change this value in Weblogic 10.0?
mmh
  • 199
  • 4
  • 13
1
vote
1 answer

What is the best way to send a notification when user is locked out in Laravel Auth?

I want to send an email notification whenever a user reaches the maximum allowed login attempts (i.e. user is locked out). What would be the best way to do this? I see a fireLockoutEvent method in the ThrottlesLogins class, should I be listening for…
Jk33
  • 855
  • 3
  • 12
  • 28
1
vote
0 answers

Preventing a user from using any other applications when the program prompts something?

Essentially, when running the application, the program would force the user to do something when a prompt pops up before they can do anything else. How would one do this?
CrizR
  • 688
  • 1
  • 6
  • 26
1
vote
0 answers

ivysvn locked out of subversion if enter incorrect password

I have multiple dependencies in my ivy.xml and am using ivysvn passing in a username and password. If the password is entered incorrectly, then since there are multiple dependencies, the auth fails multiple times and so I am now locked out of…
Shivers
  • 11
  • 1
0
votes
1 answer

Password Lock after Multiple Login Attempts for Django + simplejwt

I'm building Django app and implemented login function with django restframework simplejwt. Now trying to add function to lock out users after multiple wrong login attempts. Many people suggest django-axes package, but it only works with Django's…
Pythoner
  • 271
  • 2
  • 9
0
votes
1 answer

Django: urls.py giving No Reverse Match error

I installed django-axes which allows you to set a url to redirect to upon 5 login failures. I added this line to settings.py per the documentation: AXES_LOCKOUT_URL = 'account-locked' I then added this line to…
Tom
  • 364
  • 2
  • 19
0
votes
1 answer

How to lock a database user account after some unauthorized login attempts in a postgresql

I want to know whether Postgres has a policy to lock a particular database user after several unauthorized login attempts.
amol
  • 1
  • 1
  • 2
0
votes
0 answers

Login page brute-force attack, but page has account lockout implemented

I'm running web scans with Acunetix and the scan keeps reporting two alerts of "Login page password-guessing attack". Our application is built with ASP.NET and to combat this security alert, I've implemented account lockout that is provided with…
Bernard Polman
  • 795
  • 2
  • 14
  • 31
0
votes
1 answer

IThemes site Lockout - Wordpress

I am currently using IThemes security plugin for my Wordpress/Woocommerce website. I go on the website regularly to make sure everything is working ok. today I got locked out of the website and was unable to access any pages. I regularly get lockout…
SupGen
  • 195
  • 17
1
2