-
Title
Account does not get unlocked after "Lockout Duration" ends -
Description
Once the number of lockout attempts are reached, the console is locked as expected and shows "The user account is locked" as is appropriate. However, when the "Lockout Duration" has elapsed, the account remains locked and the message changes to "Server encountered an internal error, please contact the server administrator".
The following error is present in the Foglight Management Server log:
ERROR [http-exec-16] com.quest.foglight.auth.util.SecPasswordChecker - Pre-login check failed
java.security.AccessControlException: access denied ("javax.security.auth.AuthPermission" "ForgeServer.doAsService")
at java.base/java.security.AccessControlContext.checkPermission(AccessControlContext.java:485)
at java.base/java.security.AccessController.checkPermission(AccessController.java:1068)
at com.quest.nitro.service.security.util.SecUtils.doAsService(SecUtils.java:962)
at com.quest.foglight.auth.util.SecPasswordChecker$1.run(SecPasswordChecker.java:236)
at com.quest.foglight.auth.util.SecPasswordChecker$1.run(SecPasswordChecker.java:233)
at java.base/java.security.AccessController.doPrivileged(AccessController.java:318)
at com.quest.foglight.auth.util.SecPasswordChecker.updateUser(SecPasswordChecker.java:233)
at com.quest.foglight.auth.util.SecPasswordChecker.preLoginCheck(SecPasswordChecker.java:139) -
Resolution
WORKAROUND 1
Login with a different user to unlock the account.
- Go to Administration > Users & Security Management > Manager Users, Groups, Roles
- Click on the Locked icon for the user and then Unlock.
WORKAROUND 2If unable to login with the foglight user or unlock it with another account, follow the procedure in How to change 'foglight' user account password if its forgotten (4247256) to reset the password and unlock the account.
STATUSIssue fixed in version 7.1.2. The latest version of Foglight can be be downloaded here.
-
Defect ID
FOG-8006