User knock
Categories
Component ID
1164190
Component name
User knock
Component type
module
Maintenance status
Development status
Component security advisory coverage
not-covered
Component created
Component changed
Component body
User knock emulates "port knocking" by disabling the superuser (uid 1) account when they log out. In order to log into the account, a "secret knock" must first happen. This knock is provided in Configuration -> User knock as a URL with a generated key. Once that URL has been visited, the superuser account is activated and login proceeds as normal.
This reduces the chances of the superuser's password being bruteforced, as the account is disabled until the knock.