[keycloak-user] Brut force attack questions

Bill Burke bburke at redhat.com
Tue Nov 25 14:05:45 EST 2014

On 11/25/2014 12:32 PM, Alexander Chriztopher wrote:
> Hi,
> I have a some question with regards to Brut Force Attack Protection :
> # 1 / When brut force attack protection is enabled is there a way to
> know when a user account is locked ? I am thinking about the admin console.
> # 2 / When a user account is locked is there a way to unlock it from the
> admin console ?

Unfortunately no for the above.  I'll log a jira.

> # 3 / What is the difference between wait increment (When failure
> threshold has been met, how much time should the user be locked out?)
> and max wait (Max time a user will be locked out.).

correct on both.

Bill Burke
JBoss, a division of Red Hat

More information about the keycloak-user mailing list