I've added an ubuntu-ux task, because I'd like guidance for how this is
presented to the user.

My thinking from a technical POV is that we can use a PAM module
(pam_tally2) to record failed logins.  The timing is configurable with
it, but the default behavior is to just silently fail.  That is, once
the user fails to log in, say 5 times, then further logins for, say an
hour, will fail (even if the right password is used).  Is that how we'd
like it work?

But we probably want some message to be shown to the user.  Right now we
don't show any text at all on incorrect entries.  We just jiggle the
password box.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1347907

Title:
  create a delay for password failure attempts

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-ux/+bug/1347907/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to