Hi to all

Mojo 2385 asp 4 on sql 2008 fulltrust

I'm bulding a large intranet with only ldap authentication

The intranet is also accessible from internet, and works great...

We did asked for a security survey and it comes out, as a critical social hacker behavoiur attack, that Mojo does not check against Max Invalid Password Attempts

In fact, on ldap authentication platform, it seems that this mojo feature setted in Admin/security settings (standard values), does not work

Or may be I'm not able to do it...

Any help ??

thank in advance

Michele from Rome