Index: openacs-4/packages/acs-authentication/acs-authentication.info
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/acs-authentication/acs-authentication.info,v
diff -u -N -r1.41 -r1.42
--- openacs-4/packages/acs-authentication/acs-authentication.info	7 Aug 2017 23:47:46 -0000	1.41
+++ openacs-4/packages/acs-authentication/acs-authentication.info	1 Mar 2018 13:35:13 -0000	1.42
@@ -7,7 +7,7 @@
     <initial-install-p>t</initial-install-p>
     <singleton-p>t</singleton-p>
     
-    <version name="5.10.0d1" url="http://openacs.org/repository/download/apm/acs-authentication-5.10.0d1.apm">
+    <version name="5.10.0d2" url="http://openacs.org/repository/download/apm/acs-authentication-5.10.0d2.apm">
         <owner url="mailto:lars@collaboraid.biz">Lars Pind</owner>
         <summary>Authentication, account management, and related functionality.</summary>
         <release-date>2017-08-06</release-date>
@@ -16,7 +16,7 @@
         <license url="http://www.gnu.org/copyleft/gpl.html">GPL version 2</license>
         <description format="text/html">Implements authentication-related security functions for OpenACS, including password, account and session management, bulk account creation etc.  Provides a contract based interface for different authentication methods such as PAM or LDAP based authentication.</description>
 
-        <provides url="acs-authentication" version="5.10.0d1"/>
+        <provides url="acs-authentication" version="5.10.0d2"/>
         <requires url="acs-kernel" version="5.9.1"/>
         <requires url="acs-service-contract" version="5.9.1"/>
         <requires url="acs-mail-lite" version="5.9.1"/>
@@ -30,6 +30,8 @@
             <parameter datatype="number"  min_n_values="1"  max_n_values="1"  name="AcknowledgementFileName"  default="{acs_root_dir}/batch-sync-ack-{authority}-{ansi_date}.xml" description="Full file path to where we should drop the acknowledgement file for batch syncs. You can use these special values: {acs_root_di
 r} will get replaced with the root directory for this OpenACS installation, e.g. '/var/lib/aolserver/service0' (no trailing slash). {ansi_date} will get replaced with today's date in ANSI format, e.g. '2003-10-29'. {authority} will get replaced with the short_name of the authority, e.g. 'rz_pam'." section_name="Batch Synchronization"/>
             <parameter datatype="number"  min_n_values="1"  max_n_values="1"  name="KeepBatchLogDays"  default="0" description="The number of days to keep the log for a batch user synchronization job around. Say 0 if you want to keep the log forever." section_name="Batch Synchronization"/>
+            <parameter scope="instance" datatype="number"  min_n_values="1"  max_n_values="1"  name="MaxConsecutiveFailedLoginAttempts"  default="0" description="Enables the tracking of consecutive failed login attempts per subsite and to slowdown brute force attacks. After reaching this threshold every further login attempt from is automatically rejected for a period of MaxConsecutiveFailedLoginAttemptsLockoutTime seconds . 0 for infinte attempts. " section_name="security"/>
+            <parameter scope="instance" datatype="number"  min_n_values="1"  max_n_values="1"  name="MaxConsecutiveFailedLoginAttemptsLockoutTime"  default="21600" description="Timespan in seconds for which every login attempt is rejected after the limit set by MaxConsecutiveFailedLoginAttempts has been reached. This parameter is only in effect if MaxConsecutiveFailedLoginAttempts is greater than zero. " section_name="security"/>
             <parameter datatype="string"  min_n_values="1"  max_n_values="1"  name="RegisterAuthority"  default="local" description="The short name of the authority in which users are registered. Is best set in the Authentication admin UI."/>
             <parameter datatype="number"  min_n_values="1"  max_n_values="1"  name="SyncAddUsersToDotLrnP"  default="0" description="Should we add users to .LRN? This requires .LRN to be installed, and has serious performance implications." section_name="Batch Synchronization"/>
             <parameter datatype="number"  min_n_values="1"  max_n_values="1"  name="SyncDotLrnAccessLevel"  default="1" description=".LRN access level (if .LRN is installed). 1 = Full access user, 0 = Limited access user" section_name="Batch Synchronization"/>