[OGo-Users] Automatically Lock an Account on Failed Logins

[Sebastian Reitenbach]

> 
> Because it doesn't work.  :)  But the section before it on locked
> accounts applies.
I created a bugzilla entry, to not forget it, I hope there is not one 
already.
http://bugzilla.opengroupware.org/bugzilla/show_bug.cgi?id=1917


> 
> > > It also doesn't work
> > What do you mean with also? So this feature is just unusable because the 
> > lock out does never happen?
> 
> The lockout never happens.
I'd rather say the logout happens immediately and consequently for 
everyone ;)

> 
> > > It stores locked status in the isLocked attribute of 
Person; "is_locked"
> > > in the "person" table.   It looks like it tries to use the session log
> > > to compute the failures.
> > ok, so when it is persistently locked via the is_locked column in the 
> > database, then the Admin has to reenable the account via the WebUI. 
That's 
> > fine for me. thanks.
> 
> Yep, would be a good feature.
I think so too, I hope I'll find some time to take a look at the source to 
figure out what is going wrong there.

kind regards
Sebastian