Is there a feature for login attempts and lockout?

Uwe Peters, modified 4 Years ago. New Member Posts: 22 Join Date: 11/24/20 Recent Posts

Hello,

I noticed that in the DB table user_ there are some login attempt and lockout related fields like

  • `lastFailedLoginDate`,  
  • `failedLoginAttempts`,  
  • `lockout`,  
  • `lockoutDate`

is there a out of the box feature for this in Liferay CE 7.3.5ga6 that I can activate? 

If yes where can I configure and activate this? 

I started to implement this by myself but then I realized these fields in the user_ DB table. 
Would be great if I can stop and use the existing feature for failed login attemps and lockout.

thumbnail
Russell Bohl, modified 4 Years ago. Expert Posts: 308 Join Date: 2/13/13 Recent Posts

This should be possible through a Password Policy

There are also portal properties you can use to conrfigure the default password policy. See the ones under the Password section that start with passwords.default.policy.

7.2 Portal Properties

7.3 Portal Properties

thumbnail
Uwe Peters, modified 4 Years ago. Liferay Legend Posts: 1555 Join Date: 9/24/09 Recent Posts

You can configure Password Policies under Control Panel -> Security. I could not find a 7.3 documentation page, but apart from the new place in the menu, this should help you:

https://help.liferay.com/hc/en-us/articles/360028819212-Password-Policies