late-lockout-notification
late-lockout-notification = {yes|no}
Description
WebSEAL returns a server response error page (acct_locked.html) that notifies the user of the penalty for reaching or exceeding the maximum value set by the max-login-failures policy. This stanza entry specifies whether this notification occurs when the user reaches the max-login-failures limit, or at the next login attempt after reaching the limit.
Options
yes Upon reaching the maximum value set by the max-login-failures policy, WebSEAL returns another login prompt to the user. WebSEAL does not send the account disabled error page to the user until the next login attempt. This response represents pre-version 6.0 behavior for the max-login-failures policy. no Upon reaching the maximum value set by the max-login-failures policy, WebSEAL immediately sends the account disabled error page to the user.
Usage: Required
Default:
The default for new installations is no. The default for migrated installations is yes.
Example:
late-lockout-notification = yes