Limiting logins to 3 times

[aionius]

Good day everyone.

I'm new to acegi and i've implemented it in spring. I just want to know how to limit a failed login on 3 attempts. Here's a sample scenario:

1. user logs in and failed authentication 3 times
2. his username/password will be blocked for a day
3. after failing to login 3 times, the user will be redirected to a forgot password screen and/or contact administrator screen.

What configuration should i need to do on acegi and what code should i do.

Hope anyone can help me on this one.

Thanks!

[karldmoore]

I would do a search for this. It's been covered countless times. Here's a good start.
http://www.acegisecurity.org/faq.html

[aionius]

i couldn't understand how to do it. the configuration and the needed code to implement it. i dont know where to start.

[karldmoore]

Have you tried searching on this form as suggested? I know I've responded to this question atleast twice.