[jboss-user] [Security & JAAS/JBoss] - Re: LDAP Newbie - LdapLoginModule

Hi Jai, Accessing JSP problem is solved . I am able to access the login.jsp. I have one more doubt. In what all scenarios LoginException is thrown by LoginModule? My objective is to allow a user to give only 3 login attempts and after 3 unsuccessful login attempts user's account should be locked. I have one flag in Database for failedLogin count in order to allow Admin to unlock user account. So if LoginException is thrown only in case of Password mismatch then i am planning to implement it like this : i can catch LoginException in catch block and update DB in catch block. Please let me know how can i implement this failed login attempt functionality. Also, is it correct to use UsernamePasswordHandler in LdapLoginModule in the code? View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3989954#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...