Developer forum

Forum » CMS - Standard features » Account lockout

Account lockout

Ben Doorn
Reply

Hi,

How is the extranet account lockout function supposed to work? I have configured it for a client (see attached image) but it does not seem to do anything.  

Kind regards,

Ben

ExtranetLoginLimitations.PNG

Replies

 
Ben Doorn
Reply

Hi,

I did some analysis on the issue and I might have found the problem.

This function seems to be missing an implementation:

// Dynamicweb.Frontend.LoginHandler
private static void LogFailedFrontendLogin(string username)
{
}

I believe this function should store the invalid login attempt into the GeneralLog table in the database for the lockout counter to work.

Kind regards,

Ben

 
Oleg Rodionov Dynamicweb Employee
Oleg Rodionov
Reply

Hi Ben,

I've tested solution based on last DW9.4.12 and uses Rapido 2.1 template set. I have result like expected one (proof

Please, have a look at the attachment as well - frontend of Extranet module in Login mode during the blocking period (the settings are the same as you have mentioned above were applied).

BR, Oleg QA 

 

2018-05-31_1151.png
 
Ben Doorn
Reply

Hi Oleg,

The good thing is it is working in 9.4, the bad thing is we are running 9.3. And upgrading from 9.3 to 9.4 less then one week before the go live deadline does not seem to be a brilliant idea to me, especially considering the amount of custom code in this project. For now I will write a NotificationSubscriber to fix this.

Kind regards,

Ben

 

You must be logged in to post in the forum