Deny Login Attempts to EFT from Specific Usernames

THE INFORMATION IN THIS ARTICLE APPLIES TO:

• EFT v8 and later

DISCUSSION

You can deny login attempts from specific usernames using the advanced property described below, without checking the user database, thus reducing the load on the authentication subsystem.

The string is not case-sensitive and UTF-8 is supported. If an incoming authentication is attempted with one of the usernames, they immediately receive an authentication failure. EFT log will report the default authentication error (no additional logging provided for this).

On service start, when Advanced Properties are initialized, it will list which users are auto-denied.

To deny login attempts from specific usernames

Add the name:value pair to the AdvancedProperties.JSON file:

{
"AutoDenyLoginAttemptswithSpecificUsernames":"jsmith,MRenée, user537,"
}

The advanced property is not case sensitive (jsmith/JSmith are denied).

UTF-8 characters in the usernames can also be specified (MRenée).