I would like to ban user who fail to login cacti more time.

[baldur]

I plan to setup fail2ban to control cacti login from remote ip.
Just find cacti.log, but it doesn't have information about user login, and know the user log write into sql
database for web UI reading.

I should modify which parameter to let cacti write a file to record user login session for fan2ban checking.

[cigamit]

Here is a plugin that I wrote a while back that can force password complexity / history / expiration and lock accounts after a configurable amount of failed attempts.

[baldur]

Here is a plugin that I wrote a while back that can force password complexity / history / expiration and lock accounts after a configurable amount of failed attempts.

Thanks for your solution, and I find a new

Cacti Settings (Authentication) => Account Locking

and it works :

"This account has been locked."