Changes between Version 2 and Version 3 of CookBook/AccountManagerPluginConfiguration


Ignore:
Timestamp:
Jun 26, 2011 3:56:51 PM (3 years ago)
Author:
hasienda
Comment:

clarify config section name for AcctMgr options, start a table with misc options for advancing users

Legend:

Unmodified
Added
Removed
Modified
  • CookBook/AccountManagerPluginConfiguration

    v2 v3  
    5151 
    5252=== Goodies === 
    53 There are some misc options you may want to set/unset depending on your requirements: 
    54 ||'''Option'''||'''Default Value'''||'''Recommendation'''|| 
    55 |||||| 
     53There are some misc options for `account-manager` section of `trac.ini` you may want to set/unset depending on your requirements: 
     54||'''Option'''||'''Default Value'''||'''Recommendation'''||'''Available Since'''|| 
     55||reset_password || True ||Disallow password reset if needed. ||acct_mgr-0.? || 
     56||generated_password_length ||8 ||Useful only with reset enabled. Raise the bar for brute-force attacks on user passwords, if you feel this is needed. [AccountManagerPlugin#AccountGuard AccountGuard] might still be a more powerful alternative, see [#AccountLocking Account Locking] section below. ||acct_mgr-0.? || 
     57||force_passwd_change ||True ||Useful only with reset enabled. Randomly generated passwords should be motivation enough to change them, but YMMV.||acct_mgr-0.? || 
    5658 
    5759== Advanced configurations == 
    5860=== Password Reset === 
    5961=== Account Locking === 
    60  * new feature, development code will be in `trunk` soon 
     62 * new feature for acct_mgr-0.3 
    6163 * available options (displayed with default values here): 
     64 
    6265{{{ 
     66[components] 
     67acct_mgr.guard.accountguard = enabled 
     68}}} 
     69 
     70{{{ 
     71[account-manager] 
    6372login_attempt_max_count = 0 
    6473user_lock_time = 0 
     
    6978==== Hard Lock-up ==== 
    7079{{{ 
     80[account-manager] 
    7181login_attempt_max_count = 5 
    7282user_lock_time = 0 
     
    7888==== Fixed login delay ==== 
    7989{{{ 
     90[account-manager] 
    8091login_attempt_max_count = 3 
    8192user_lock_time = 30 
     
    8899==== Modestly progressing login delay ==== 
    89100{{{ 
     101[account-manager] 
    90102login_attempt_max_count = 2 
    91103user_lock_time = 15 
     
    119131==== Aggressively progressing, but limited login delay ==== 
    120132{{{ 
     133[account-manager] 
    121134login_attempt_max_count = 4 
    122135user_lock_time = 10