Re: Issue with Django-axes

2017-03-06 Thread Melvyn Sopacua
On Monday 06 March 2017 01:51:13 Arun S wrote: > i am using django-axes package and want to lock out a user based on > userid. If you want to deactivate the account, then do so. "The login_required decorator does NOT check the is_active flag on a user, but the default AUTHENTICATION_BACKENDS[1]

Re: Issue with Django-axes

2017-03-06 Thread Babatunde Akinyanmi
I think the only way you will be able to uniquely identify a computer is by using a "permanent" cookie. I find such practice very very intrusive and it's something I will personally not do. Meanwhile, IP addresses, cookies and the likes are good to identify computers not users. If you really want

Issue with Django-axes

2017-03-06 Thread Arun S
Hi, i am using django-axes package and want to lock out a user based on userid. Now there is an issue that the user gets locked out from one IP, but the same user can still login from a different IP successfully. Which negates the whole use of a security requirement of locking a particular user