fix: always lock login-failed user when PasswordErrorLockCount not initialized

This commit is contained in:
Qiu Jian
2019-11-18 08:48:51 +08:00
parent e05ba0d0bb
commit a96b35e364
+1 -1
View File
@@ -57,7 +57,7 @@ func (sql *SSQLDriver) Authenticate(ctx context.Context, ident mcclient.SAuthent
err = models.VerifyPassword(usrExt, ident.Password.User.Password)
if err != nil {
localUser.SaveFailedAuth()
if localUser.FailedAuthCount > o.Options.PasswordErrorLockCount {
if o.Options.PasswordErrorLockCount > 0 && localUser.FailedAuthCount > o.Options.PasswordErrorLockCount {
models.UserManager.LockUser(usrExt.Id)
}
return nil, errors.Wrap(err, "usrExt.VerifyPassword")