140 IBM Content Manager OnDemand Guide
Disable Or Lock Out After Failed Logins
This setting specifies whether you want to limit the number of failed login attempts by a user. 
Y ou can limit the number of login attempts, specify how many failed attempts you want to 
permit, and specify whether to disable or lock out the user after the user exceeds that number 
of attempts. 
If you choose to disable a user, the user must request that the system administrator re-enable 
the user ID. 
If you choose to lock out the user, the user must wait to attempt another login. Y ou specify 
how many minutes to wait in the Number Of Minutes To Lock Out User field.
LDAP authentication
Use Lightweight Directory Access Protocol (LDAP) to store authentication values on a 
separate organizationally centralized server that is remote from Content Manager 
OnDemand. LDAP can be used in place of the user security exit to manage basic login 
authentication. Figure 6-8 shows how Content Manager OnDemand works with LDAP .
Figure 6-8   Content Manager OnDemand works with LDAP 
Y ou can specify whether you want to use LDAP authentication in your Content Manager 
OnDemand server. 
When you enable LDAP authentication, the Content Manager OnDemand server makes an 
authentication request to the LDAP server every time it receives a login request from the 
client. The Content Manager OnDemand server processes the client request only after the 
user information is verified by the LDAP server.
CMOD browser
Clie nts
CMOD Windows
Clients
CMOD  Server LDA P  Se r ve r
Webserver
HTTP
LDAP 
database