Uploaded image for project: 'Identity Provider'
  1. Identity Provider
  2. IDP-1635

"No lockout key returned for request" after successful authentication

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 4.0.1
    • Fix Version/s: 4.1.0
    • Component/s: Authentication
    • Labels:
      None
    • Operating System:
      Linux
    • Java Version:
      Red Hat OpenJDK 11
    • Servlet Container:
      Apache Tomcat 8.5

      Description

      I'm seeing WARN messages after successful authentications from net.shibboleth.idp.authn.impl.StorageBackedAccountLockoutManager:292 that "No lockout key returned for request".

      I turned on DEBUG logging and the key lookup seems to work fine in check() and increment() but not clear().

      2020-07-07 08:31:18,262 - DEBUG [net.shibboleth.idp.authn.impl.StorageBackedAccountLockoutManager:239] - No lockout record available for 'larscheidt2!127.0.0.1'
      2020-07-07 08:31:18,570 - INFO [net.shibboleth.idp.authn.impl.LDAPCredentialValidator:162] - Credential Validator ldap: Login by 'larscheidt2' failed
      2020-07-07 08:31:18,572 - DEBUG [net.shibboleth.idp.authn.impl.StorageBackedAccountLockoutManager:318] - Reading account lockout data for 'larscheidt2!127.0.0.1'
      2020-07-07 08:31:18,572 - DEBUG [net.shibboleth.idp.authn.impl.StorageBackedAccountLockoutManager:356] - Invalid login count for 'larscheidt2!127.0.0.1' will be 1, expiring at 2020-07-07T13:36:18.572Z
      2020-07-07 08:31:25,203 - DEBUG [net.shibboleth.idp.authn.impl.StorageBackedAccountLockoutManager:262] - Invalid attempts counter for 'larscheidt2!127.0.0.1' has only reached 1
      2020-07-07 08:31:25,594 - INFO [net.shibboleth.idp.authn.impl.LDAPCredentialValidator:145] - Credential Validator ldap: Login by 'larscheidt2' succeeded
      2020-07-07 08:31:25,595 - WARN [net.shibboleth.idp.authn.impl.StorageBackedAccountLockoutManager:292] - No lockout key returned for request
      

        Attachments

          Activity

            People

            Assignee:
            cantor.2@osu.edu Scott Cantor
            Reporter:
            larscheidt@wisc.edu Ryan Larscheidt
            Watchers:
            2 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:

                Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 3 hours, 15 minutes
                3h 15m