Properties
Properties
Configure general server options in the portal.
Click Server Settings
Click Properties
Each field has its own Update control. Modules are an exception: those switches update together. Tabs match the portal UI.
General
| Field | Description |
|---|---|
| Public IP Address or Name | Public hostname or IP used by clients |
| Web Server URL | Full server base URL (for example https://server.example.com/) |
| RDP URI | Remote Desktop Protocol URI |
| Internal Web Proxy | Outbound web proxy as HOST:PORT |
| LDAP Delete Delay (Minutes) | How long before disabled directory users are deleted (default 60) |
| Request priority options | Codes and descriptions for policy request priority pickers. Use Add to create; open the list to Edit or Delete; then Update |
Events and Logging
| Field | Description |
|---|---|
| Failed Login Handler | Event handler name for failed logins |
| Request Handler | Policy event handler name |
| Administrator Alert | Alert/handler for issues needing administrator attention |
| Alert Throttle Time (Minutes) | Throttle keyed alerts (default 5) |
| Log Retention Period | 1, 7, 30, 60, 90, 180, or 365 days (default 7) |
| Disable archive log history | Shown when archive log history is enabled |
| Log Handler | Event handler name for detailed logging |
Session
| Field | Description |
|---|---|
| Session Inactivity Timeout (Minutes) | Default 60 |
| SSH Token Timeout (Seconds) | Default 15 |
| Auto Lockout Duration (Minutes) | Lockout after failed attempts (default 15) |
| Email MFA Enabled | Enable one-time email 2FA |
| Portal OAuth Only | Hide username/password when a web OAuth provider is configured |
| WebSQL MFA Connections | Require MFA when opening a datasource in the WebSQL editor |
| WebSQL Show Menu | Show the Web SQL menu in navigation |
| WebSocket Registration Flow | Leave blank for single device, or enter legacy for multiple devices |
| TLS Protocols for Database Proxies | Blank or a comma-separated protocol list. Example: TLSv1.1,TLSv1.2,TLSv1.3. Reboot after change. |
| TLS Ciphers for Database Proxies | Blank or comma-separated ciphers; reboot after change |
If Portal OAuth Only locks you out, add
oauth-only-portal-override=false to $MAMORI_HOME/var/derby.properties, restart Hub, sign in, turn the option off, then remove the override.
Service Ports
| Field | Description |
|---|---|
| Mamori v2 API Port | Port for the Mamori v2 API |
Modules
Menu visibility toggles for licensed features:
| Switch | Description |
|---|---|
| Edge Networking (WireGuard) | WireGuard / edge networking menus |
| Database Access Controls | Database PAM menus |
| Data Privacy Controls | Data privacy menus |
| SSH Access Management | SSH menus |
| Remote Desktop Access Management | RDP menus |
| Application Access Management | Application / HTTP access menus |
| Secret Management | Secrets menus |
| Application Privacy Controls | Application privacy menus |
Password Policy
Open the Password Policy tab on this Properties page. Each option has its own Update control. Changes apply to new passwords; existing passwords are not forced to reset.
| Field | Description |
|---|---|
| Minimum Password Length | Minimum length |
| Maximum Password Length | Maximum length (0 = no maximum) |
| Minimum Numerals Required | Minimum digit count |
| Minimum Punctuation Required | Minimum punctuation count |
| Minimum Lowercase Letters Required | Minimum lowercase count |
| Minimum Uppercase Letters Required | Minimum uppercase count |
| Minimum Character Types Required | Minimum distinct character classes |
| Password Expiration Days | Days until password expires |
| Inactivity Limit (Days) | Days of inactivity before account is affected |
| Failed Attempts Limit | Failed logins before lock (default 10) |
| Password re-use prevention | How many previous passwords cannot be reused (0 disables) |
Auto lockout duration after failed attempts is on the Session tab (Auto Lockout Duration (Minutes)), not on this tab.
SQL reference
-- Updating any property
call set_server_property('YOUR PROPERTY NAME', 'value');
-- Enable proxy detailed trace for just a specific user
call set_proxy_user_debug('USERNAME', true);
call set_server_property('on_failed_login', 'connection_failed');
call set_server_property('email_mfa_enabled', 'false');
call set_server_property('on_request_handler', 'custom_on_request');
CALL SET_SERVER_PROPERTY('mamori.ldap.delete_delay.minutes', '60');
call set_server_property('websocket_registration_flow', 'legacy');
call set_server_property('ALERT_THROTTLE_TIME', '5');
-- DB proxy TLS (reboot after change)
call TLS_SETTINGS();
call set_server_property('enabled_tls_ciphers', 'default');
call set_server_property('enabled_tls_protocols', 'TLSv1.1,TLSv1.2,TLSv1.3');
-- Password policy
select * from "SYS"."SYSPOLICIES";
alter policy password set options (password_length_minimum '12');
alter policy password set options (password_numeral_minimum '1');
alter policy password set options (password_punctuation_minimum '1');
alter policy password set options (password_upper_case_minimum '1');
alter policy password set options (password_expiration_days '60');
alter policy password set options (password_history_lockout '0');
alter policy password set options (inactivity_limit_days '0');
alter policy password set options (password_length_maximum '0');
alter policy password set options (password_lower_case_minimum '0');
alter policy password set options (password_character_type_minimum '0');
alter policy password set options (failed_attempts_limit '10');
CALL SET_SERVER_PROPERTY('mamori.security.auto_lockout.minutes', '15');
(DISABLE | ENABLE) USER <username>
ALTER USER <username> LOCK [UNTIL timestamp]
ALTER USER <username> UNLOCK