Author: ashde | Posted on: 6/14/2010 9:25:25 PM | Views : 252

I am migrating a web app with Basic authentication to use Forms authentication (need a custom login screen). I am authenticating the users against a Windows Active Directory. I tried 2 approaches - using the ActiveDirectoryMembershipProvider and using the System.DirectoryServices classes.
While esting, I noticed that my account got locked out after x successive failure attempts which is undesirable. I don't want the user account to be locked if they cannot logon to this website. The application behaviour when using BASIC authentication is different - i.e. users don't get locked out if they enter invalid credentials.
Is there a way to prevent the account from being locked out in the Forms Authentication + AD case and make it behave similar to how IIS handles the Basic authentication (i.e. no account lockouts)?

Thanks in advance.
Ash



...

Go to the complete details ...