[keycloak-user] Brut force attack questions

Bill Burke bburke at redhat.com
Tue Nov 25 14:05:45 EST 2014



On 11/25/2014 12:32 PM, Alexander Chriztopher wrote:
> Hi,
>
> I have a some question with regards to Brut Force Attack Protection :
>
> # 1 / When brut force attack protection is enabled is there a way to
> know when a user account is locked ? I am thinking about the admin console.
>
> # 2 / When a user account is locked is there a way to unlock it from the
> admin console ?
>

Unfortunately no for the above.  I'll log a jira.

> # 3 / What is the difference between wait increment (When failure
> threshold has been met, how much time should the user be locked out?)
> and max wait (Max time a user will be locked out.).
>

correct on both.


-- 
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com


More information about the keycloak-user mailing list