PUBLIC - Liferay Portal Community Edition

When a user is locked out of LDAP it's not throwing the you are locked out error message just authentication failed on the login form

Details

  • Fix Priority:
    4
  • Similar Issues:
    Show 5 results 

Description

If you attempt to login 3 times with the incorrect password (our current settings for LDAP) it locks you out of the system... But liferay doesn't tell you that it just gives a generic "Authentication failed. Please try again. "

Activity

Ascending order - Click to sort in descending order
Hide
Permalink
Jason Reast-Jones added a comment - - Restricted to

Dale,

Are you sure you've correctly set the property "ldap.error.user.lockout" this string value is used by Liferay to recognise the correct error response from LDAP, and this behaviour does work..

For example:
FedoraDS: ldap.error.user.lockout=retry limit
OpenDS: ldap.error.user.lockout=locked

Hope that helps.

Jason

Show
Jason Reast-Jones added a comment - - Restricted to Dale, Are you sure you've correctly set the property "ldap.error.user.lockout" this string value is used by Liferay to recognise the correct error response from LDAP, and this behaviour does work.. For example: FedoraDS: ldap.error.user.lockout=retry limit OpenDS: ldap.error.user.lockout=locked Hope that helps. Jason
Hide
Permalink
Mika Koivisto added a comment -

This sounds to me more like a bug rather than improvement. Needs to be verified that it's not configuration issue.

Show
Mika Koivisto added a comment - This sounds to me more like a bug rather than improvement. Needs to be verified that it's not configuration issue.
Hide
Permalink
Shinn Lok added a comment -

Should be implemented in: LEP-3113

Show
Shinn Lok added a comment - Should be implemented in: LEP-3113

People

Vote (1)
Watch (1)

Dates

  • Created:
    Updated:
    Resolved:
    Days since last comment:
    5 weeks, 6 days ago