Re: [pgAdmin4][Patch] - Fix for RM #6664 - Mailing list pgadmin-hackers

From Khushboo Vashi
Subject Re: [pgAdmin4][Patch] - Fix for RM #6664
Date
Msg-id CAFOhELeUUTeUqjvZ4LuNqwYyL9tW8GKmFa_kNF53pnmA4gJppQ@mail.gmail.com
Whole thread Raw
In response to [pgAdmin4][Patch] - Fix for RM #6664  (Khushboo Vashi <khushboo.vashi@enterprisedb.com>)
Responses Re: [pgAdmin4][Patch] - Fix for RM #6664
List pgadmin-hackers
Hi,

Kerberos Login fails for the first time which is a regression of the #6337 - Login page brute force.
Please find the attached updated patch with this fix.

Thanks,
Khushboo

On Mon, Aug 9, 2021 at 11:32 AM Khushboo Vashi <khushboo.vashi@enterprisedb.com> wrote:
Hi,

Please find the attached fix for the RM #6664. The issue is, even if the user is locked, he can reset the password and can login into pgAdmin.

With this fix, I have also ensured that the account should be locked with the multiple failed attempts only for the Internal pgAdmin users.

Thanks,
Khushboo
Attachment

pgadmin-hackers by date:

Previous
From: Khushboo Vashi
Date:
Subject: [pgAdmin4][Patch] - Fix for RM #6664
Next
From: Akshay Joshi
Date:
Subject: pgAdmin 4 commit: Update Japanese translation.