You are free to specify other limits in Admin >> Site configuration.
If all your users come via the same IP, just set the number of wrong
attemts for an IP considerable higher then the one for an account.
Also setting a shorter blocking time of eg. 5min instead of the default
30min helps a lot.
You should not switch the blocking time completely off, as there are
nice tools which get you quickly into eGW (and any other web app), if
you dont block the login for a certain time after an unsuccessful login.
The blocked users are displayed in the access log in the web GUI.
If you are interested in the development of an unblocking via the web
GUI, just let us (www.egroupware-support.eu) know.
Ralf
John Robson schrieb:
It’s almost certainly me, but I can’t find a way to unblock either users
or IP addresses which have managed to exceed the allowed number of login
failures.
You can setup this in Administration/ Site Administration
You may update the values to higher ones.
That is what I do at the moment, it’s fairly horrible and hacky though,
and it doesn’t help that many of my users are NATted, so if that IP
address gets blocked it is a significant problem.
Could someone point me to where I need to be looking (or of course tell
me if it simply isn’t there before i wake up and declare myself an
onion).
The number of wrong logins is counted from DB, in table : egw_access_log
You can search for field sessionid equal to 'bad login or password’
and delete for your users, your SQL can be some one like this:
SELECT * FROM egw_access_log WHERE sessionid = ‘bad login or
password’ OR to DELETE ALL the bad entries:
DELETE FROM egw_access_log WHERE sessionid = ‘bad login or password’
I generally dislike throwing non validated SQL at live databases,
besides it would be nice to keep those records in place, maybe I should
update them with “bad login cleared”
At least I’m not just being blind 
I think it would be good to have a list of IPs and/or usernames that
have bad logins against them and a function to unblock them from the
WebUI.
John
Check out the new SourceForge.net Marketplace.
It’s the best place to buy or sell services for
just about anything Open Source.
http://sourceforge.net/services/buy/index.php
eGroupWare-users mailing list
eGroupWare-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/egroupware-users
–
Ralf Becker
eGroupWare Training & Support ==> http://www.egroupware-support.de
Outdoor Unlimited Training GmbH [www.outdoor-training.de]
Handelsregister HRB Kaiserslautern 3587
Geschäftsführer Birgit und Ralf Becker
Leibnizstr. 17, 67663 Kaiserslautern, Germany
Telefon +49 (0)631 31657-0
Check out the new SourceForge.net Marketplace.
It’s the best place to buy or sell services for
just about anything Open Source.
http://sourceforge.net/services/buy/index.php
eGroupWare-users mailing list
eGroupWare-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/egroupware-users
