تخطي للذهاب إلى المحتوى
القائمة
لقد تم الإبلاغ عن هذا السؤال
1 الرد
299 أدوات العرض

To secure production enviornment from Brute force attack Odoo has implemented login_cooldown_after

It working fine when workers = 0

The moment i activate/ put worker >0 it does not work and did not produce failour count

as it not sharing login attempt counter between different process.


what is the alternative solution and is not possible to use login_cooldown_after in multithreading environment?

الصورة الرمزية
إهمال
أفضل إجابة

odoo stores logins trials in registry so you can not guarantee which worker(process) the user will try each time. the best solution suggested from odoo use tool like fail2ban

source https://www.odoo.com/documentation/18.0/administration/on_premise/deploy.html#blocking-brute-force-attacks

الصورة الرمزية
إهمال
الكاتب

it means login_cooldown_after feature is useless!!