text: **Disable Or Lock Out After Failed Logins**
  This setting specifies whether you want to limit the number of failed login attempts by a user. 
  You can limit the number of login attempts, specify how many failed attempts you want to 
  permit, and specify whether to disable or lock out the user after the user exceeds that number 
  of attempts. 
  
  If you choose to disable a user, the user must request that the system administrator re-enable 
  the user ID. 
  
  If you choose to lock out the user, the user must wait to attempt another login. You specify 
  how many minutes to wait in the Number Of Minutes To Lock Out User field. 
  
  **LDAP authentication**
  Use Lightweight Directory Access Protocol (LDAP) to store authentication values on a 
  separate organizationally centralized server that is remote from Content Manager 
  OnDemand. LDAP can be used in place of the user security exit to manage basic login 
  authentication. Figure 6-8 shows how Content Manager OnDemand works with LDAP. 