Open Stack

Hi All,

The OpenStack login screen has just login name and password for validation.
Now, if someone writes a script to perform DoS attacks by sending a lot of
fake login requests, the server will easily become unavailable.

I know there is a section in the security page which talks about
multi-factor authentication. However, each organization has to implement
this at their own (Correct me if I am wrong here).

Questions

Is there any property based solution to provide multifactor authentication?
Like, the multi-factor implementation would be a part of OpenStack
installation but would be unavailable by default and if an organization
enables that property, they will have the multifactor authentication
enabled.

I apologize if my question is very basic. I am quite new to OpenStack.


-- 
Best
Regards,
Puneet Jain

<https://www.linkedin.com/pub/puneet-jain/20/917/a54>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20171012/538bc15f/attachment.html>