Developer forum

Forum » CMS - Standard features » Users locked out - how to reset

Users locked out - how to reset

E-mail notifications
Scott Forsyth
Reply
Posted on 11/11/2015 16:13:23

Users can be locked due to too many invalid attempts to login. Where is that state stored, and can it be reset manually in the backend?

Is it backed by the database, if so which table and columns, or is it in-memory? I see that it's not saved in the AccessUser table.


Replies

 
Morten Bengtson
Posted on 12/11/2015 09:34:39
Reply

You can configure the lockout feature in Management Center, but I don't think there is any way to 'unlock' a user manually. The user will just have to wait and try again later (blocking period).

Failed login attempts are stored in the database in the table GeneralLog.

If you really need to 'unlock' a user immediately then you can use the following script to do that...

DECLARE @username AS nvarchar(max)
SET @username = 'test'

DECLARE @blockingperiod AS int
SET @blockingperiod = 10

DELETE FROM GeneralLog 
WHERE LogAction = 'Frontend login failed'
AND LogDate > DATEADD(MINUTE,-@blockingperiod,GETDATE())
AND LogDescription LIKE 'UID:' + @username + ',IP:%'
 
Scott Forsyth
Posted on 13/11/2015 02:58:39
Reply

Perfect. Thanks Morten!

That's exactly what I was looking for. Just knowing that it's in GeneralLog will help me next time (and I tested it out so that I could see it in action), and I'll submit a feature request to add this to the UI too. Some of our users would benefit from that.

Scott

 

 

You must be logged in to post in the forum