Skip to content

[login] section

Login service configuration

methods

  • Default value: local
  • YAML Path: login.methods
  • Key-value Path: login/methods
  • Environment: NOC_LOGIN_METHODS

session_ttl

  • Default value: 604800
  • YAML Path: login.session_ttl
  • Key-value Path: login/session_ttl
  • Environment: NOC_LOGIN_SESSION_TTL

language

  • Default value: en
  • YAML Path: login.language
  • Key-value Path: login/language
  • Environment: NOC_LOGIN_LANGUAGE

restrict_to_group

  • YAML Path: login.restrict_to_group
  • Key-value Path: login/restrict_to_group
  • Environment: NOC_LOGIN_RESTRICT_TO_GROUP

single_session_group

  • YAML Path: login.single_session_group
  • Key-value Path: login/single_session_group
  • Environment: NOC_LOGIN_SINGLE_SESSION_GROUP

mutual_exclusive_group

  • YAML Path: login.mutual_exclusive_group
  • Key-value Path: login/mutual_exclusive_group
  • Environment: NOC_LOGIN_MUTUAL_EXCLUSIVE_GROUP

idle_timeout

  • Default value: 604800
  • YAML Path: login.idle_timeout
  • Key-value Path: login/idle_timeout
  • Environment: NOC_LOGIN_IDLE_TIMEOUT

pam_service

  • Default value: noc
  • YAML Path: login.pam_service
  • Key-value Path: login/pam_service
  • Environment: NOC_LOGIN_PAM_SERVICE

radius_secret

  • Default value: noc
  • YAML Path: login.radius_secret
  • Key-value Path: login/radius_secret
  • Environment: NOC_LOGIN_RADIUS_SECRET

radius_server

  • YAML Path: login.radius_server
  • Key-value Path: login/radius_server
  • Environment: NOC_LOGIN_RADIUS_SERVER

register_last_login

  • Default value: True
  • YAML Path: login.register_last_login
  • Key-value Path: login/register_last_login
  • Environment: NOC_LOGIN_REGISTER_LAST_LOGIN
  • Default value: noc_jwt
  • YAML Path: login.jwt_cookie_name
  • Key-value Path: login/jwt_cookie_name
  • Environment: NOC_LOGIN_JWT_COOKIE_NAME

jwt_algorithm

  • Default value: HS256

  • Possible values:

    • HS256
    • HS384
    • HS512

  • YAML Path: login.jwt_algorithm

  • Key-value Path: login/jwt_algorithm
  • Environment: NOC_LOGIN_JWT_ALGORITHM

max_failed_attempts

Block account after max_failed_attempts failed attempts in failed_attempts_window. If 0, do not block on failed attemps.

  • YAML Path: login.max_failed_attempts
  • Key-value Path: login/max_failed_attempts
  • Environment: NOC_LOGIN_MAX_FAILED_ATTEMPTS

failed_attempts_window

Failed attempts check window for max_failed_attempts.

  • YAML Path: login.failed_attempts_window
  • Key-value Path: login/failed_attempts_window
  • Environment: NOC_LOGIN_FAILED_ATTEMPTS_WINDOW

failed_attempts_cooldown

Account blocking time if max_failed_attempts is enabled and exceeded.

  • YAML Path: login.failed_attempts_cooldown
  • Key-value Path: login/failed_attempts_cooldown
  • Environment: NOC_LOGIN_FAILED_ATTEMPTS_COOLDOWN