Support #11470: [SCP ID :##5709##] : Temporary password counter not reset - BSN CDB Support - Penril Support System

Support #11470

[SCP ID :##5709##] : Temporary password counter not reset

Added by Zahir Abd Latif over 3 years ago. Updated over 3 years ago.

Status:

Closed - End of life cycle

Start date:

January 05, 2021

Priority:

Immediate

Due date:

Assignee:

Nurul Athira Abdul Rahim

% Done:

100%

Category:

Spent time:

Target version:

Description

Hi,
Kindly attend below request:-

Step to replicate :

1) Create new CDB user
2) Do FTL
3) Enter wrong password 3 times
4) Unlock user to get new temporary password
5) Do FTL again
6) Enter Correct temporary Password
7) Get error (User account Locked)

Expected result : Unable to do FTL upon password reset

11470 temporary password.docx (2.99 MB) Nurul Athira Abdul Rahim, January 08, 2021 16:56

11470-Upass Temporary password counter not reset DONE.docx (3.86 MB) Nurul Athira Abdul Rahim, January 22, 2021 19:00

History

#1 Updated by Nurul Athira Abdul Rahim over 3 years ago

Assignee changed from Nurul Athira Abdul Rahim to Najmi Pasarudin

#2 Updated by Najmi Pasarudin over 3 years ago

Status changed from New - Begin Life Cycle to Development / Work In Progress
% Done changed from 0 to 90

#3 Updated by Najmi Pasarudin over 3 years ago

Status changed from Development / Work In Progress to Internal Testing
Assignee changed from Najmi Pasarudin to Nurul Athira Abdul Rahim

Issue:
New user accessed FTL and entered temporary password once but got error account has been locked.

Finding:
New user entered wrong temporary password 3 times and got locked.
After unlocked, user accessed FTL and entered temporary password once and got error account has been locked.
Table for temporary password did not reset the error count, so the user status remains lock.

Solution:
Update code to reset error count when requesting new temporary password.

Test scenario:
1) Create new CDB user
2) Do FTL
3) Enter wrong password 3 times
4) Unlock user to get new temporary password
5) Do FTL again
6) Enter Correct temporary Password
7) Expected result, temporary password is valid and can complete the FTL