Updated on 2024-05-11 GMT+08:00

Configuring User Login Lockout

For login security purposes, the source IP address or user account will be locked out if the number of consecutive invalid password attempts exceeds the configured threshold.

This topic describes how to configure the user login lockout, including changing the lockout method, lockout duration, and maximum login attempts.

Prerequisites

You have the management permissions for the System module.

Procedure

  1. Log in to the CBH system.
  2. Choose System > Sysconfig > Security.
  3. In the UserLock Config area, click Edit.

    Complete configurations as prompted.
    Figure 1 UserLock Config
    Table 1 Parameters for configuring user lockout

    Parameter

    Description

    Lock

    Lockout method. The options are User and Source IP.

    • User: If the number of consecutive failed password attempts exceeded the upper limit, the user is blocked by the CBH system.
    • Source IP: If the number of consecutive failed password attempts exceeded the upper limit, the source IP address is blocked by the CBH system.

    Password attempt

    Allowed maximum number of consecutive failed password attempts.

    • Default value: 5
    • Value range: 0 to 999
    • If this parameter is set to 0, the user account will not be locked out even if the password is incorrect.

    Lock duration

    Lockout duration

    • Default value: 30 minutes
    • Value range: 0 to 10080, in minutes
    • If this parameter is set to 0, the user account or source IP address will be locked out unless the administrator unlocks it.

    Count reset duration

    Duration after which the number of login failures is reset to 0.

    • Default value: 5 minutes
    • Value range: 1 to 10080, in minutes

  4. Click OK. You can then check the lockout configuration of the current system user on the Security tab.

    Figure 2 UserLock Config