Uploaded image for project: 'OpenAM'
  1. OpenAM
  2. OPENAM-11167

<ActualLockoutDuration> is not updated in the attribute sunStoreInvalidAttemptsData

    Details

    • Sprint:
      AM Sustaining Sprint 40, AM Sustaining Sprint 41, AM Sustaining Sprint 42, AM Sustaining Sprint 50, AM Sustaining Sprint 51
    • Story Points:
      3
    • Needs backport:
      Yes
    • Support Ticket IDs:
    • Needs QA verification:
      Yes
    • Functional tests:
      No
    • Are the reproduction steps defined?:
      Yes and I used the same an in the description

      Description

      The element <ActualLockoutDuration> is not updated in the sunStoreInvalidAttemptsData in the following scenario

      1. User, testuser1 logs in with an incorrect password, the contents of sunStoreInvalidAttemptsData is

      ....<ActualLockoutDuration>0</ActualLockoutDuration>...

      2. The property 'Login Failure Lockout Duration" is changed i.e to 5 mins

      3. User testuser1 logs in again with an incorrect password, again the contents of sunStoreInvalidAttemptsData -s

      <InvalidCount>2</InvalidCount>....<ActualLockoutDuration>0<.....

      The 'InvalidCount' element has been updated but the 'ActualLockoutDuration' remains at '0'

      4. If I now login as testuser2 with an invalid password, the sunStoreInvalidAttemptsData reflects the updated ActualLockoutDuration

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                kamal.sivanandam@forgerock.com Kamal Sivanandam
                Reporter:
                gyan.baines Gyan Baines
              • Votes:
                0 Vote for this issue
                Watchers:
                6 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: