From c78779949ef34330d14e49b0c3b9cc7d896b647c Mon Sep 17 00:00:00 2001 From: DawoudSheraz Date: Tue, 9 Jul 2019 14:29:29 +0500 Subject: [PATCH] update login lockout params --- cms/envs/common.py | 4 ++-- cms/envs/production.py | 9 +++++++-- lms/envs/common.py | 4 ++-- lms/envs/production.py | 9 +++++++-- 4 files changed, 18 insertions(+), 8 deletions(-) diff --git a/cms/envs/common.py b/cms/envs/common.py index 1e331702e0..cce5e936dd 100644 --- a/cms/envs/common.py +++ b/cms/envs/common.py @@ -1278,8 +1278,8 @@ AUTH_PASSWORD_VALIDATORS = [ ] ##### ACCOUNT LOCKOUT DEFAULT PARAMETERS ##### -MAX_FAILED_LOGIN_ATTEMPTS_ALLOWED = 5 -MAX_FAILED_LOGIN_ATTEMPTS_LOCKOUT_PERIOD_SECS = 15 * 60 +MAX_FAILED_LOGIN_ATTEMPTS_ALLOWED = 6 +MAX_FAILED_LOGIN_ATTEMPTS_LOCKOUT_PERIOD_SECS = 30 * 60 ### Apps only installed in some instances diff --git a/cms/envs/production.py b/cms/envs/production.py index 7cf730f5bd..e97242ccdc 100644 --- a/cms/envs/production.py +++ b/cms/envs/production.py @@ -457,8 +457,13 @@ EVENT_TRACKING_BACKENDS['segmentio']['OPTIONS']['processors'][0]['OPTIONS']['whi AUTH_TOKENS.get("EVENT_TRACKING_SEGMENTIO_EMIT_WHITELIST", [])) ##### ACCOUNT LOCKOUT DEFAULT PARAMETERS ##### -MAX_FAILED_LOGIN_ATTEMPTS_ALLOWED = ENV_TOKENS.get("MAX_FAILED_LOGIN_ATTEMPTS_ALLOWED", 5) -MAX_FAILED_LOGIN_ATTEMPTS_LOCKOUT_PERIOD_SECS = ENV_TOKENS.get("MAX_FAILED_LOGIN_ATTEMPTS_LOCKOUT_PERIOD_SECS", 15 * 60) +MAX_FAILED_LOGIN_ATTEMPTS_ALLOWED = ENV_TOKENS.get( + "MAX_FAILED_LOGIN_ATTEMPTS_ALLOWED", MAX_FAILED_LOGIN_ATTEMPTS_ALLOWED +) + +MAX_FAILED_LOGIN_ATTEMPTS_LOCKOUT_PERIOD_SECS = ENV_TOKENS.get( + "MAX_FAILED_LOGIN_ATTEMPTS_LOCKOUT_PERIOD_SECS", MAX_FAILED_LOGIN_ATTEMPTS_LOCKOUT_PERIOD_SECS +) #### PASSWORD POLICY SETTINGS ##### AUTH_PASSWORD_VALIDATORS = ENV_TOKENS.get("AUTH_PASSWORD_VALIDATORS", AUTH_PASSWORD_VALIDATORS) diff --git a/lms/envs/common.py b/lms/envs/common.py index 28155441af..8255962121 100644 --- a/lms/envs/common.py +++ b/lms/envs/common.py @@ -2841,8 +2841,8 @@ FILE_UPLOAD_STORAGE_BUCKET_NAME = 'SET-ME-PLEASE (ex. bucket-name)' FILE_UPLOAD_STORAGE_PREFIX = 'submissions_attachments' ##### ACCOUNT LOCKOUT DEFAULT PARAMETERS ##### -MAX_FAILED_LOGIN_ATTEMPTS_ALLOWED = 5 -MAX_FAILED_LOGIN_ATTEMPTS_LOCKOUT_PERIOD_SECS = 15 * 60 +MAX_FAILED_LOGIN_ATTEMPTS_ALLOWED = 6 +MAX_FAILED_LOGIN_ATTEMPTS_LOCKOUT_PERIOD_SECS = 30 * 60 ##### LMS DEADLINE DISPLAY TIME_ZONE ####### diff --git a/lms/envs/production.py b/lms/envs/production.py index ad7b72334c..363ad9aa5c 100644 --- a/lms/envs/production.py +++ b/lms/envs/production.py @@ -660,8 +660,13 @@ FINANCIAL_REPORTS = ENV_TOKENS.get("FINANCIAL_REPORTS", FINANCIAL_REPORTS) ORA2_FILE_PREFIX = ENV_TOKENS.get("ORA2_FILE_PREFIX", ORA2_FILE_PREFIX) ##### ACCOUNT LOCKOUT DEFAULT PARAMETERS ##### -MAX_FAILED_LOGIN_ATTEMPTS_ALLOWED = ENV_TOKENS.get("MAX_FAILED_LOGIN_ATTEMPTS_ALLOWED", 5) -MAX_FAILED_LOGIN_ATTEMPTS_LOCKOUT_PERIOD_SECS = ENV_TOKENS.get("MAX_FAILED_LOGIN_ATTEMPTS_LOCKOUT_PERIOD_SECS", 15 * 60) +MAX_FAILED_LOGIN_ATTEMPTS_ALLOWED = ENV_TOKENS.get( + "MAX_FAILED_LOGIN_ATTEMPTS_ALLOWED", MAX_FAILED_LOGIN_ATTEMPTS_ALLOWED +) + +MAX_FAILED_LOGIN_ATTEMPTS_LOCKOUT_PERIOD_SECS = ENV_TOKENS.get( + "MAX_FAILED_LOGIN_ATTEMPTS_LOCKOUT_PERIOD_SECS", MAX_FAILED_LOGIN_ATTEMPTS_LOCKOUT_PERIOD_SECS +) #### PASSWORD POLICY SETTINGS ##### AUTH_PASSWORD_VALIDATORS = ENV_TOKENS.get("AUTH_PASSWORD_VALIDATORS", AUTH_PASSWORD_VALIDATORS)