-
Notifications
You must be signed in to change notification settings - Fork 23
Incorrect password causes lockout #106
Description
OpenMRS locks out a user for 5 minutes after 7 incorrect login attempts in a row.
https://wiki.openmrs.org/display/docs/Administering+Users#AdministeringUsers-ManagingUserLockout
It looks like the client app keeps trying to log in even when it's getting back an "incorrect password" response.
This is on a per-user database so when all apps are sharing a user it's a lot more likely to happen.
Because the tablets keep trying periodically to log in they automatically hit the limit and get locked out.
Most appropriate fix is probably if the tablet sees it is getting an incorrect password response, it should stop trying until you edit the settings and hit "Apply" on either the server, username or password dialog.
To workaround this for now and unlock the user, in mysql I had to run:
delete from user_property where user_id=4 and property=‘lockoutTimestamp’;
delete from user_property where user_id=4 and property='loginAttempts’;