Option to reset the LDAP user after the maximum number of failed logins Admin UI

[norman]

• Used Zammad version: 2.5
• Used Zammad installation source: DEB
• Operating system: Debian 9 64bit
• Browser + version: Firefox 61

Expected behavior: unlock user (ldap user)after to many failed logins

Actual behavior: no options finded

Steps to reproduce the behavior:

• After too many failed logins, zammad locks the user login
• and then I did not find an option to unblock user logon by an LDAP user

Ciao Norman

[gwingend]

Right now you have to do that by command line but I know that @svnr-dvnkln did an enhancement request on that.
Endusers ofter use the wrong (old) password after they were force to changed their password in ldap (AD).

[gwingend]

Frontend option for locked users

It would be really nice if admins were able to unlock users via web gui. Right now you have to look up the users inside the database with something like that: SELECT login,login_failed FROM users WHERE login_failed >= '1'; And you have to fix it with another statement like: UPDATE users SET login_failed = 0 WHERE login = 'USERNAME'; OR UPDATE users SET login_failed = 0 WHERE login_failed >= '1'; What i would like to see would be a tab in the admin settings. Maybe a “Locked Users” tab und…

[norman]

Thank´s, gwingend.
i think that the methode over SQL is ok for me.

[MrGeneration]

This is just my personal thought:

In my opinion, the LDAP-Server should handle unlocking it’s users by policy.
Microsoft Active Directory can do that by policy for example.

Not sure for LDAP itself, but this should really controlled by LDAP itself.

[svnr-dvnkln]

Don’t know how that should work though.
The lock is zammad internal only - the AD user f. e. is not locked at all.

[MrGeneration]

I see, my bad - sorry about that. Let me talk to the Devs then.

[MrGeneration]

Currently the lock is only removed, if you remove it by shell or if the admin in the admin panel does reset the password of the user. Currently no other way is implemented.

I’ll change this to a Feature request. The community is free to vote for this Feature - that way we’ll be able to determine how important this feature is to everyone.