Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I've enabled htpasswd on a webpage. Is there a way I can limit the number of attempts a user has to enter the correct username/pass credentials before they have to do a hard refresh of the page?

share|improve this question
add comment

1 Answer

up vote 4 down vote accepted

Not with basic authentication, you'll need to go to a different authentication module in order to do it. I was just reading up on mod_auth_pamacea which allows you to use the PAM libraries and all of their goodness with .htpasswd. You could setup a separate service for your http authentication and then use pam_tally.so to limit the number of login attempts. Here are a couple of links for your reading pleasure:

The Linux-PAM System Administrators' Guide

mod_auth_pamacea Documentation

I'm sure there are other auth modules that will allow the same functionality, to me this is the closest you'll come to mod_auth_basic.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.