Password Recovery
- usermgr.passwordrecovery.enabled
-
Switch password recovery on or off.
Allowed values:
true,false - usermgr.passwordrecovery.showstartpagelink
-
Password recovery link on the login page of the Administrator.
Allowed values:
trueorfalse - usermgr.passwordrecovery.baseurl
-
URL used to put into the password recovery mailing template.
- usermgr.passwordrecovery.timeout
-
Defines the validity of a password recovery request in minutes. If the timeout value is exceeded the recovery request is invalidated and the user has to request another password recovery.
Default value:
1440minutes (1 day) - usermgr.passwordrecovery.retentionPeriodMinutes
-
Defines the period in minutes after which unfinished password recovery requests are automatically deleted. Set this value to
0to disable automatic deletion.Default value:
43200minutes (30 days)Since version 4.23.0
- usermgr.passwordrecovery.attemptDelayMillisPerIp
-
Defines the minimum time in milliseconds between two password recovery requests from the same IP address to prevent DoS attacks. If you set this value to
0then this protection is disabled.Default value:
60000ms = 1 minuteSince version 4.23.0