Overnight some users losing login access

[hiten_rastogi1]

Hi All,

From past two weeks we have noticed some strange behaviour in our CE 201702 for two production instances. One user in both the production instances lost their login access. Surprisingly one user was able to login after 6-7 hours and multiple attempts(any hint here ??) but for the other user the problem still persist.

We tried updating the password but to no avail. Both the tomcat logs and apache logs were clean. There was no UI error visible in developer console.

We checked the database and the user was there, checked whether the user was not disabled by the admin but not. We double checked everything but found nothing.

Has anyone faced this issue then please shed some light.

Thanks

Hiten Rastogi

[hiten_rastogi1]

FYI,

The issue is related to alfresco's brute force protection feature. 

To work around this issue set the property authentication.protection.enabled = false in alfresco global props file. Then clean the work and temp dir under <AlfrescoTomcat_Home>.

Please make sure that while doing the above your installation is not running.