Login
Register
Search
Home
Forums
Jobs
LawsonGuru
LawsonGuru Letter
LawsonGuru Blog
Worthwhile Reading
Infor Lawson News Feed
Store
Store FAQs
About
Forums
Infor / Lawson Platforms
S3 Security
After LDAP Bind the Logon Error handling is inconsistent
Home
Forums
Jobs
LawsonGuru
LawsonGuru Letter
LawsonGuru Blog
Worthwhile Reading
Infor Lawson News Feed
Store
Store FAQs
About
Who's On?
Membership:
Latest:
Jessica
Past 24 Hours:
2
Prev. 24 Hours:
0
Overall:
5164
People Online:
Visitors:
288
Members:
0
Total:
288
Online Now:
New Topics
Top Forum Posters
Name
Points
Greg Moeller
4184
David Williams
3349
JonA
3288
Kat V
2984
Woozy
1973
Jimmy Chiu
1883
Kwane McNeal
1437
Ragu Raghavan
1348
Roger French
1311
mark.cook
1244
Forums
Unanswered
Active Topics
Most Liked
Most Replies
Search Forums
Search
Advanced Search
Topics
Posts
Prev
Next
Forums
S3 Security
After LDAP Bind the Logon Error handling is inconsistent
Sort:
Oldest First
Most Recent First
You are not authorized to post a reply.
Author
Messages
mikeD
Basic Member
Posts: 5
10/18/2012 1:57 PM
If user enters an invalid user name, then the name and password are cleared and message "Invalid username or password. Please try again." is displayed.
If user enters an invalid password, then the name and password are cleared and no message is displayed.
Has anyone run into this? Is there a way to correct this?
Ideally an invalid name and/or password give same error message to the user.
Roger French
Veteran Member
Posts: 545
10/18/2012 8:55 PM
The actual messages displayed in portal, with delivered Lawson, that's how it is. Lawson designed it.
If your question is, if you can change or make consistent the messaging for wrong/mistyped ID's or passwords, yes you could change it to use whatever logic or messages you want. You'd want to brush up on your javascript skills to do it.
Joe O'Toole
Veteran Member
Posts: 314
9/3/2013 7:53 PM
We are running Env 9.019 on the Windows platform and bound to AD but do not get any message back at all in Portal when a correct User Id is entered with an incorrect password. If an incorrect user name is supplied the message "invalid username or password" is displayed but it is not common for a user to forget their correct login name. The lack of any message from entering and invalid password is causing AD account lockouts and a good deal of frusration for users as we have strict rules in place for expiring passwords and failed login attempt limits. Does anyone know if 9.01X has the ability to supply a meaningful message to the user if just the password is incorrect?
Alex Tsekhansky
Veteran Member
Posts: 92
9/4/2013 2:35 PM
Lawson supplies this message based on the LDAP code returned from the BIND (if you're BINDed), and as far as I remember, those messages are pre-programmed in the Java code of the servlets used by WAS. So, to my knowledge you cannot do this via "standard" Lawson/portal means. However, I have done so in the past by a custom mod to either a Lawson servlet or a Portal login interface.
Joe O'Toole
Veteran Member
Posts: 314
9/4/2013 4:36 PM
I opened a support ticket with Infor and they said there is a patch JT-179975 to address this issue. Unfortunately, the patch is for 9.01 SP11 and we are running SP9 so an Env update will be required before we can even install it.
Joe O'Toole
Veteran Member
Posts: 314
9/4/2013 7:25 PM
Clarification - Infor tells me this JT is included in ESP 11 so no post-upgrade patch install is required. Is there anyone out there running LSF 9.01011 in a "Windows bound to AD" environment that can confirm a message is displayed when a valid UID but invalid PWD is supplied in the Portal login screen?
You are not authorized to post a reply.