I have been working on a project using springframework version 2.0 and acegissecurity version 1.0.2. In the project I need to create a function to disable user after user input wrong password 3 times. I have read several document around the internet, but I did not find any tutorial that comment any method that override when user have fail login.

I have try to define applicationListener on accessDecisionManager and authenticationManager but it doesn't seem to work. How could I register the event and listener for fail login on xml file? And how would the event function get the user object? I'm completely new on the security stuff

Thanks!!