Last modified: 2014-05-05 13:55:53 UTC
Created attachment 15104 [details] The 5 minute warning when being locked out When a user fails their password 5 times, they are automatically blocked by default. The message returned suggests trying again in 5 minutes but the block is enforced for longer than 5 minutes (maybe indefinitely). The block is also stored in memory rather than in the block list so it does not appear in the usual block pages and the login attempts cannot be unblocked. The way I resolved it was to restart the service, flushing the block from memory. Is there a way to disable this block or have more control over it? It looks to me like the returned error message will need updating, and the blocks to be stored on the block list rather than in memory where it can't be controlled.
Matt: Unrelated, but are you really still using old 1.22.0?
Ah, no, I just couldn't find the minor release version I was on at the time. I've changed that now.
