Skip to content

Incorrect password causes lockout #106

@dancunningham

Description

@dancunningham

OpenMRS locks out a user for 5 minutes after 7 incorrect login attempts in a row.

https://wiki.openmrs.org/display/docs/Administering+Users#AdministeringUsers-ManagingUserLockout

It looks like the client app keeps trying to log in even when it's getting back an "incorrect password" response.

This is on a per-user database so when all apps are sharing a user it's a lot more likely to happen.

Because the tablets keep trying periodically to log in they automatically hit the limit and get locked out.

Most appropriate fix is probably if the tablet sees it is getting an incorrect password response, it should stop trying until you edit the settings and hit "Apply" on either the server, username or password dialog.

To workaround this for now and unlock the user, in mysql I had to run:

delete from user_property where user_id=4 and property=‘lockoutTimestamp’;
delete from user_property where user_id=4 and property='loginAttempts’;

Metadata

Metadata

Labels

2016Needs re-triage; from 2016 or earlierbugA defect in design or behaviour

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions