<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body>
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
<div id="divtagdefaultwrapper" style="font-size:14pt;color:#000000;background-color:#FFFFFF;font-family:'Times New Roman', Times, serif;">
<p>Victor,</p>
<p>It will help if you post what you did. I agree with Richard</p>
</div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of Näslund, Victor <victor.naslund@smhi.se><br>
<b>Sent:</b> Thursday, August 4, 2016 12:22:11 PM<br>
<b>To:</b> Shib Users<br>
<b>Subject:</b> Re: Login throttling</font>
<div> </div>
</div>
<div>
<div dir="ltr">Hello,
<div><br>
</div>
<div>I modified the source code to include a login throttling based on both IP address and username.</div>
<div><br>
</div>
<div>Its a very small modification, i can send you the source code and show you how to compile it if you are interested.</div>
<div><br>
</div>
<div class="" style="padding-bottom:20px;font-size:medium">
<div class="">
<div id=":2jh" class="" style="font-size:12.8px">
<div id=":2la" class="">
<div dir="ltr">
<div style="font-size:12.8px">
<div>
<p class="MsoNormal"><b><span style="font-size:8pt;font-family:Tahoma,sans-serif;color:black">Victor Näslund</span></b><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:7.5pt;font-family:Tahoma,sans-serif;color:black">Linux and Identity management </span><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Tahoma,sans-serif;color:black"> </span><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><b><span style="font-size:8pt;font-family:Tahoma,sans-serif;color:black">SMHI</span></b><span style="font-size:8pt;font-family:Tahoma,sans-serif;color:black"> / <b>Swedish Meteorological and Hydrological Institute</b></span><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:7pt;font-family:Tahoma,sans-serif;color:black">ITi – IT Infrastructure</span><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:7.5pt;font-family:Tahoma,sans-serif;color:black">SE - 601 76 NORRKÖPING</span><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:7.5pt;font-family:Tahoma,sans-serif;color:black"><a href="http://www.smhi.se/" target="_blank">www.smhi.se</a></span><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Tahoma,sans-serif;color:black"> </span><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:7.5pt;font-family:Tahoma,sans-serif;color:black">E-post / Email: <a href="mailto:victor.naslund@smhi.se" target="_blank">victor.naslund@smhi.se</a></span><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:7.5pt;font-family:Tahoma,sans-serif;color:black">Tel vx/ Phone: <a href="tel:%2B46%20%280%2911%20495%2080%2000" target="_blank">+46 (0)11 495 80 00</a></span><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:7.5pt;font-family:Tahoma,sans-serif;color:black">Direct Phone: <a href="tel:%2B46%20%280%2911%20495%2082%2046" target="_blank">+46 (0)11 495 82 46</a></span><u></u><u></u></p>
</div>
<p class="MsoNormal"><span style="font-size:7.5pt;font-family:Tahoma,sans-serif;color:black">Besöksadress / Street address: Folkborgsvägen 17</span><u></u><u></u></p>
<div class=""></div>
</div>
</div>
</div>
</div>
<div class=""></div>
</div>
<div class=""></div>
</div>
<div class="" style="font-size:12.8px;background-color:rgb(255,255,255)">
<div class="">
<div class=""></div>
</div>
</div>
<div> </div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Thu, Aug 4, 2016 at 5:58 PM, Richard Frovarp <span dir="ltr">
<<a href="mailto:richard.frovarp@ndsu.edu" target="_blank">richard.frovarp@ndsu.edu</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Is there anything built in to IdP v3 that can do login throttling? That seems like the one thing that is missing from the PasswordAuthnConfiguration. I want to do fail2ban style throttling where I block out the remote system instead of the user. This would
prevent a remote system from doing a DoS against an account, and prevent searching for the accounts with a password of "Password1".<br>
<br>
I have mod_security available to use. I could use that if I knew of all of the URLs where a login could be posted.<br>
<br>
Thanks,<br>
<br>
Richard<span class="HOEnZb"><font color="#888888"><br>
<br>
-- <br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">
users-unsubscribe@shibboleth.n<wbr>et</a><br>
</font></span></blockquote>
</div>
<br>
</div>
</div>
</body>
</html>