Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-52170

A user account receives a prompt to try again on the last allowed failed attempt rather than being warned that the account has been locked

    Details

      Description

      Steps to reproduce

      1. Set up Liferay with default Password Policy and enable Lockout
      2. Set maximum failure count to desired number n (the default is 3)
      3. Create another user
      4. Log out of administrator account
      5. Attempt to log in as the other user with the incorrect password n times
      6. Assert the "account is locked" warning appears on the n + 1 attempt instead of the nth attempt.

        Attachments

        1. fix.PNG
          fix.PNG
          15 kB
        2. reproduce.PNG
          reproduce.PNG
          13 kB

          Issue Links

            Activity

              People

              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:
                  Days since last comment:
                  4 years, 33 weeks ago

                  Packages

                  Version Package
                  6.2.X EE
                  7.0.0 M4