Deny certain usernames, like "root" and "admin" from logging in

THE INFORMATION IN THIS ARTICLE APPLIES TO:

• EFT v8.0 and later

DISCUSSION

The advanced property, AutoDenyLoginAttemptswithSpecificUsernames, allows you to deny certain usernames without checking the user database, so you can reduce the load on the authentication subsystem.

The string is not case-sensitive, comma separated, and UTF-8 is supported. The string can be up to 255 characters.

If an incoming authentication is attempted with one of the usernames, they get immediate authentication failure, and the EFT log will report the default authentication error. (No additional logging is provided for this).

On service start, when advanced properties are initialized, EFT will list which users are auto-denied.

Specify the advanced property described below.

{

"AutoDenyLoginAttemptswithSpecificUsernames":"admin, root, administrator, user"

}