Domino password policies don’t consider an internet password lock-out by retries, so I have to build my own authenticationapp to satisfy this requirement.
Does enybody know of a ready-made solution?
I’m thinking of keeping track of retries with a cookie. When the maximun retries are reached, set a special verification cookie and redirect to a form with embedded valid username/password that will check the verification cookie and, if ok, launch an agent to clear the user’s internet password field. Obviously the agent will have enough privileges to access/edit the names database.
Does it make sense? Can anybody think of a simpler method?
If you are going to do custom authenication App, then I would say follow through via custom app.
I don’t know of a pre-made solution which would lock out an user. I feel you should look at a custom app and have the login via a web agent (lotusscript). Allow the web agent to record how many password fail attempts. The passwords would not be in the names though which leads… OF course using a custom app means you are not truly using session base authenication.
There was a good article in 1999 or 2000 on session authentication that did just what you wanted on ‘www.breakingpar.com’, but it appears as though the link is no longer valid.
