summaryrefslogtreecommitdiff
path: root/doc/bruteforce-protection.markdown
diff options
context:
space:
mode:
authorFrederic Guillot <fred@kanboard.net>2016-08-26 21:27:30 -0400
committerFrederic Guillot <fred@kanboard.net>2016-08-26 21:27:30 -0400
commita24840a5332d717d2afa8516d1df0b4e4b958dd1 (patch)
tree2350ee0a92fd7a6fccb8fdc76b1a3e34581c75c1 /doc/bruteforce-protection.markdown
parent793eb1074f6df9f5dfa5ffece0219228a2cddfad (diff)
Add the possibility to unlock users from the user interface
Diffstat (limited to 'doc/bruteforce-protection.markdown')
-rw-r--r--doc/bruteforce-protection.markdown9
1 files changed, 9 insertions, 0 deletions
diff --git a/doc/bruteforce-protection.markdown b/doc/bruteforce-protection.markdown
index a7bef45e..2f75b919 100644
--- a/doc/bruteforce-protection.markdown
+++ b/doc/bruteforce-protection.markdown
@@ -12,6 +12,9 @@ However, **after three authentication failure through the user API**, the accoun
Kanboard doesn't block any IP addresses since bots can use several anonymous proxies. However, you can use external tools like [fail2ban](http://www.fail2ban.org) to avoid massive scans.
+Configuration
+-------------
+
Default settings can be changed with these configuration variables:
```php
@@ -24,3 +27,9 @@ define('BRUTEFORCE_LOCKDOWN', 6);
// Lock account duration in minutes
define('BRUTEFORCE_LOCKDOWN_DURATION', 15);
```
+
+Unlocking users
+---------------
+
+If you don't want to wait 15 minutes, you can unlock a user from the user interface.
+As administrator, go to the user profile and click on "Unlock this user".