Skip to main content

This is a very simple idea :

Local et AD authentication need to have a CAPTCHA for secure Centreon login from bot attacks. 

This not concerne OpenID authentication because providers have some secure process.

 

Hi @Arnaud,  Thank you for your idea proposal. I would invite you to reformulate it according to the guidelines you can find here. This would help the Product Manager Team to better evaluate your proposal. Thanks for your understanding


Hi @Arnaud, since Centreon 22.04, we have added a secure password policy for the local account which allows to block the user for X minutes if you enter Y wrong password in a row. It's not sufficient ?

Moreover, you can add an identity provider in front of your LDAP to benefit from more security.

Regards,


NewDeclined

hi,

I don’t know about secure password policy in 22.04, but if it’s a fail2ban solution, it’s not a good solution.

Because some compagny can use a reverse proxy in front of central.

So Central see the private IP of this proxy and can ban it. In this case, it ban everyone.

maybe you use an other/better solution than fail2ban.

In this case, it’s OK.