Brute Force Protection

Overview

A brute-force attack is an attempt to discover a password by systematically trying every possible combination of letters, numbers, and symbols until you discover the one correct combination that works. SecureTrack provides the following brute force protection policy for SecureTrack users:

• REST API: 5 minute lockout after 2 failed login attempts within 1 second

• SecureTrack users: 45 minute lockout after 20 failed attempts within 12 hours

Use the brute_force_protection.sh script to enable or disable the policy. By default, brute force protection is enabled.

What Can I do Here?

View Current Status

kubectl exec -it deploy/keycloak-service -c keycloak-service -- manage_keycloak -r brute_force_protection -a status

Enable

kubectl exec -it deploy/keycloak-service -c keycloak-service -- manage_keycloak -r brute_force_protection -a enable

Disable

kubectl exec -it deploy/keycloak-service -c keycloak-service -- manage_keycloak -r brute_force_protection -a disable