Details
Description
- Login as Admin
- Create an user (e.g. U1)
- Go to Administer Wiki > Users & Rights > Authentication
- On 'Failure Strategies' select 'Disable account' and Save
- Logout
- Try to login with user's name (U1) and a wrong password 3 times (default setting) in order to get the message that the user's account is disabled
- Login as Admin
- Go to user's (U1) profile page and enable its profile
- Logout
- Try to login again with user's name (U1) and a wrong password
EXPECTED RESULTS
The message 'Error: Invalid credentials' is displayed. The user has 2 remaining tries until its account is disabled again.
ACTUAL RESULTS
The message that the user's account is disabled is still displayed. If logging in with Admin and go to the user's profile page, the account is disabled indeed.
However, this happens if the user does not first login successfully after its account was enabled by Admin.
Attachments
Issue Links
- is related to
-
XWIKI-16532 Add an authentication failure strategy to block user
- Closed