The Jazz/RTC server does not handle the authentication of the users, but
the application server itself does. It sounds like you are using the
bundled Tomcat install. It's unlikely, but perhaps Tomcat allows you to
configure maximum login attempts or password expirations, you could ask
in a Tomcat forum to see.

If Tomcat doesn't allow it, the next best approach would be to setup a
LDAP server that does let you configure the behavior you want and
re-configure the Jazz/RTC server to use the LDAP server for
authentication instead of Tomcat's built-in registry.

-
Matt Lavin
Jazz Server Team


On Wed, 2008-11-19 at 11:58 +0000, fgra wrote:

Dear Community,
Our Jazz Server is using the internal stand-alone User Administration.
To comply to certain security policies I need to configure a password
expiration which locks the account when expired and a maximum count
of login attempts.
How could I implement that?

Thanks for your help

Florian