New FreeIPA User - Bad Login Throttle or Progressive Delay or Brute Force Countermeasures

[Brad Chesney]

...Does FreeIPA have anything built in to add increasing sadness to a would be intruder in
the event of successive failed authentication attempts?

What is it called so I can search for the documentation on the topic?

Thanks. This is my first foray into making all the servers use one central system for
authentication and access controls via roles and  permissions.

[Florence Blanc-Renaud]

On 12/23/19 4:49 AM, Brad Chesney via FreeIPA-users wrote:
>  ...Does FreeIPA have anything built in to add increasing sadness to a
> would be intruder in the event of successive failed authentication attempts?
>  
>  What is it called so I can search for the documentation on the topic?
>   
Hi,
you can have a look at the chapter related to password policies:
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/...

The password policies allows to define a "max failures" number, a 
"failure reset interval" and "lockout duration". The user account gets

locked when this max number of failed logins is reached.

HTH,
flo
>  Thanks. This is my first foray into making all the servers use one
> central system for authentication and access controls via roles and  permissions.
>  _______________________________________________
>  FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
>  To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
>  Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives:
> https://lists.fedorahosted.org/archives/list/[e-mail]...
>

[Brad Chesney]

I could not have asked for a better reply. I appreciate you taking time out of your day to
put a laser focused pointer to the exact thing I was hoping to find, which helps
immensely.