I am migrating a web app with Basic authentication to use Forms authentication (need a custom login screen). I am authenticating the users against a Windows Active Directory. I tried 2 approaches - using the ActiveDirectoryMembershipProvider and using the System.DirectoryServices classes.
While esting, I noticed that my account got locked out after x successive failure attempts which is undesirable. I don't want the user account to be locked if they cannot logon to this website. The application behaviour when using BASIC authentication is different - i.e. users don't get locked out if they enter invalid credentials.
Is there a way to prevent the account from being locked out in the Forms Authentication + AD case and make it behave similar to how IIS handles the Basic authentication (i.e. no account lockouts)?
Thanks in advance.
Ash
...
Go to the complete details ...