[java-identity-provider COMMIT] in /trunk/idp-conf/src/main/resources: conf/authn/password-authn-config.xml system/fl...

[noreply at shibboleth.net]

Author: scantor
Date: Thu Oct 13 22:47:46 2016
New Revision: 8494

URL: http://svn.shibboleth.net/view/java-identity-provider?rev=8494&view=rev
Log:
IDP-156 - Create an authn lock-out stage

https://issues.shibboleth.net/jira/browse/IDP-156

Wire in default lockout manager (commented out).

Modified:
    trunk/idp-conf/src/main/resources/conf/authn/password-authn-config.xml
    trunk/idp-conf/src/main/resources/system/flows/authn/password-authn-beans.xml

Modified: trunk/idp-conf/src/main/resources/conf/authn/password-authn-config.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/conf/authn/password-authn-config.xml?rev=8494&r1=8493&r2=8494&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/conf/authn/password-authn-config.xml	(original)
+++ trunk/idp-conf/src/main/resources/conf/authn/password-authn-config.xml	Thu Oct 13 22:47:46 2016
@@ -37,6 +37,16 @@
         <bean parent="shibboleth.Pair" p:first="^(.+)@example\.edu$" p:second="$1" />
         -->
     </util:list>
+    
+    <!-- Uncomment to configure account lockout backed by in-memory storage. -->
+    <!--
+    <bean id="shibboleth.authn.Password.AccountLockoutManager"
+        parent="shibboleth.StorageBackedAccountLockoutManager"
+        p:maxAttempts="5"
+        p:counterInterval="PT5M"
+        p:lockoutDuration="PT5M"
+        p:extendLockoutDuration="false" />
+    -->
 
     <!--
     Define entries here to map error messages detected by validation actions and classify them as particular
@@ -62,6 +72,7 @@
         </entry>
         <entry key="AccountLocked">
             <list>
+                <value>AccountLocked</value>
                 <value>Clients credentials have been revoked</value>
             </list>
         </entry>

Modified: trunk/idp-conf/src/main/resources/system/flows/authn/password-authn-beans.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/system/flows/authn/password-authn-beans.xml?rev=8494&r1=8493&r2=8494&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/system/flows/authn/password-authn-beans.xml	(original)
+++ trunk/idp-conf/src/main/resources/system/flows/authn/password-authn-beans.xml	Thu Oct 13 22:47:46 2016
@@ -17,6 +17,15 @@
 
     <bean class="net.shibboleth.ext.spring.config.IdentifiableBeanPostProcessor" />
     <bean class="net.shibboleth.idp.profile.impl.ProfileActionBeanPostProcessor" />
+
+    <bean id="shibboleth.StorageBackedAccountLockoutManager" abstract="true"
+            class="net.shibboleth.idp.authn.impl.StorageBackedAccountLockoutManager"
+            p:storageService-ref="shibboleth.StorageService">
+        <property name="lockoutKeyStrategy">
+            <bean class="net.shibboleth.idp.authn.impl.StorageBackedAccountLockoutManager.UsernameIPLockoutKeyStrategy"
+                p:httpServletRequest-ref="shibboleth.HttpServletRequest" />
+        </property>
+    </bean>
 
     <import resource="../../../conf/authn/password-authn-config.xml" />