How to Configure web.config
Configuring web.config
The "web.config” file can be used to configure several options in the SES Web Console. Some settings in the web.config file contain placeholders which are automatically updated through running the SDWeb Configurator. This will need to be completed after the initial installation.
"web.config” is located in \Winmagic\SDDB-NT\SDWeb\
Notes:
- Unless otherwise stated, the settings in "web.config” should not be modified as it will affect the SES Web Console.
- After modifying a setting, the application must be restarted for the changes to take effect.
appSettings
The context help is modified by changing the following values within each key from appSettings:
webhelp | - Used to show the context help
The default value is:http://www.winmagic.com/knowledgebase/seswebconsole.php - This value will be prepopulated by WinMagic
|
webhelpParameters | - Used for using a (path/name of topic) or a (search string)
- "/#” used for a (path/name of topic); "/?page=” is used for a (search string)
- Default value is "/#”
- ie: <add key="webhelpParameters" value="/?page="/>
|
ContextHelpDelay | - Timer for opening the help dialogue on mouse rollover.
- 0 will disable this feature
- The default value is 800 milliseconds
- ie: <add key="contextHelpDelay" value="500" />
- Opens the context help on rollover in 500 ms
|
ContextHelpClose | - Time for closing the help dialogue on mouse rollout
- The default value is 1050 milliseconds
- ie: <add key="contextHelpClose" value="2000" />
- Closes the context help on rollout in 2000 ms
|
loginTimeout | - Logs the user out and redirects them to the login page after being inactive for the specified amount of time
- The default value is 15 minutes
- ie: <add key="loginTimeOut" value="15" />
- Logs the user out after being inactive for 15 minutes
|
The Challenge Response is modified by changing the following values in this key from appSettings:
ChallengeResponse- QuestionAnswerMode | - Used for the challenger response
- 0 is invisible to the admin, 1 is visible to the admin
- The default value is 0
- ie: <add key="ChallengeResponseQuestionAnswerMode" value="1" />
- The Challenge Response Answer/Question mode will be visible to the admin
|
system.web
The following list or parameters within the SESMembership section (used to validate the username/password) can be modified:
Settings for login management are modified within:
<add name="SesMembershipProvider"
type="SES.Web.Core.AccessControl.SesMembershipProvider"
maxInvalidPasswordAttempts="3"
maxInvalidPasswordAttemptsBeforeCaptcha="1"
passwordAttemptWindow="10"/>
The login management options can be modified by changing the following parameters within the SESMembershipProvider:
Maxinvalid-PasswordAttempts | - The maximum amount of tries a user is allowed to login
- Upon reaching the maximum amount, a message will appear indicating that the account has been locked for some time (populated from passwordAttemptWindow)
- The default value is 3 failed attempts
- ie: < … maxInvalidPasswordAttempts="2" … >
- The account will be locked out after 2 failed attempts
|
maxinvalidPassword-AttemptsBefore-Captcha | - The amount of failed attempts before a verification code (Captcha) must be entered
- Captcha: Completely Automated Public Turing Test to tell Computers and Humans Apart
- If this value is greater than maxinvalidPasswordAttempts, the Captcha will not appear, this disables the function
- The default value is 1 failed attempt, any value set below 1 will be treated as 1
- ie: < … maxInvalidPasswordAttemptsBeforeCaptcha="3">
- The verification code will be needed after the user has unsuccessfully entered their password 3 times
|
passwordAttempt-Window | - Sets the timer to lockout a user
- The default value is 10 minutes
- This time is shown on the login screen after the maxinvalidPasswordAttempts has been reached
- ie: < … passwordAttemptWindow="5" …>
- The user will be locked out for 5 minutes
|