Project

General

Profile

Actions

Bug #28860

closed

Wrong Error Message/Return code getting after exceeding the 'failed_login_attempts_limit'

Added by Tomer Brisker about 4 years ago. Updated about 4 years ago.

Status:
Closed
Priority:
Normal
Category:
Authentication
Target version:
-
Fixed in Releases:
Found in Releases:

Description

Cloned from https://bugzilla.redhat.com/show_bug.cgi?id=1778599

Description of problem:
Wrong Error Message/Return code(Internal server error) getting after exceeding the 'failed_login_attempts_limit'

Version-Release number of selected component (if applicable):

How reproducible:
Always

Steps to Reproduce:
[root@satellite]# hammer -u admin -p changeme settings set --name failed_login_attempts_limit --value 5

Setting [failed_login_attempts_limit] updated to [5].
[root@satellite ~]# for i in 1 2 3 4 5; do hammer -u admin -p WRONG_PASS user list; done
Unable to authenticate user admin
Unable to authenticate user admin
Unable to authenticate user admin
Unable to authenticate user admin
Unable to authenticate user admin

[root@satellite ~]# hammer -u admin -p changeme user list
undefined local variable or method `logger' for #<Foreman::BruteforceProtection:0x00007f80b6979698>

Actual results:
Error Message is shown as 'undefined local variable or method `logger' for #<Foreman::BruteforceProtection:0x00007f80b6979698>' and error code is '70'

Expected results:
Error Message is Incorrect and Return code should be '129'


Related issues 1 (0 open1 closed)

Related to Foreman - Feature #26887: graphql login: count login failures as brute force attemptsClosedTimo GoebelActions
Actions #1

Updated by Tomer Brisker about 4 years ago

  • Subject changed from Wrong Error Message/Return code getting after exceeding the 'failed_login_attempts_limit' to Wrong Error Message/Return code getting after exceeding the 'failed_login_attempts_limit'

This doesn't only affect hammer but all methods. This was caused by refactoring in https://projects.theforeman.org/issues/26887

Actions #2

Updated by Tomer Brisker about 4 years ago

  • Difficulty set to trivial
Actions #3

Updated by Tomer Brisker about 4 years ago

  • Related to Feature #26887: graphql login: count login failures as brute force attempts added
Actions #4

Updated by Dominik Matoulek about 4 years ago

  • Assignee set to Dominik Matoulek
Actions #5

Updated by The Foreman Bot about 4 years ago

  • Status changed from New to Ready For Testing
  • Pull request https://github.com/theforeman/foreman/pull/7405 added
Actions #6

Updated by The Foreman Bot about 4 years ago

  • Fixed in Releases 2.0.0 added
Actions #7

Updated by Dominik Matoulek about 4 years ago

  • Status changed from Ready For Testing to Closed
Actions #8

Updated by The Foreman Bot about 4 years ago

  • Pull request https://github.com/theforeman/foreman/pull/7423 added
Actions #9

Updated by The Foreman Bot about 4 years ago

  • Pull request https://github.com/theforeman/foreman/pull/7424 added
Actions #10

Updated by Tomer Brisker about 4 years ago

  • Fixed in Releases 1.23.2, 1.24.3 added
Actions #11

Updated by Tomer Brisker about 4 years ago

  • Subject changed from Wrong Error Message/Return code getting after exceeding the 'failed_login_attempts_limit' to Wrong Error Message/Return code getting after exceeding the 'failed_login_attempts_limit'
Actions

Also available in: Atom PDF