topic Lock user account for 5 minutes after too much login attempts in ONTAP Discussions

Lock user account for 5 minutes after too much login attempts

Quang-Chinh — Mon, 04 Dec 2023 15:45:14 GMT

Customer would like to configure the following behavior:

After 3 failing login attempts, lock the account for 5 minutes.

There is a documentation (lien) with [-lockout-duration <integer>] but looks like we can only set up the number of lockout days.

Is there a way to lockout the account for minutes?

Thank you.

Re: Lock user account for 5 minutes after too much login attempts

TMACMD — Fri, 03 Nov 2023 14:50:18 GMT

that’s correct. Drives me nuts.
it works be nice if ONTAP allowed a minutes duration instead of days. Days makes no sense.

in fact during the first couple of ONTAP STIGs, if you filtered to the letter, you worked new locked out for at least a full day. Someone finally saw that and it got fixed in 1.2 or 1.3.