Preference regarding reporting of authentication errors

Lipscomb, Gary glipscomb at csu.edu.au
Mon Oct 10 18:31:38 EDT 2016


just get the administrator to change the text in authn-messages.properties

bad-username.message = The username you entered cannot be identified.
bad-password.message = The password you entered was incorrect.
expired-password.message = Your password has expired.
account-locked.message = Your account is locked.


Gary

> -----Original Message-----
> From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor,
> Scott
> Sent: Tuesday, 11 October 2016 5:38
> To: users at shibboleth.net (users at shibboleth.net) <users at shibboleth.net>
> Subject: Preference regarding reporting of authentication errors
> 
> There's been a request that we stop shipping the IdP to report specific error
> causes to users in the default templates [1], and I'm agnostic about it myself
> (I don't agree with the issue being a concern, but I don't care what the
> default is), so i'm just going to ask for opinions by requesting that those who
> feel strongly about this go ahead and add a comment to that effect in the Jira
> issue. If a decent number want it changed, I'm happy to do so since it doesn't
> affect anybody's existing installation.
> 
> Discussion here is fine, just want to avoid a lot of +1/-1 posts, and I'm not
> going to tally votes here.
> 
> -- Scott
> 
> [1] https://issues.shibboleth.net/jira/browse/IDP-1023
> 
> --
> To unsubscribe from this list send an email to users-
> unsubscribe at shibboleth.net


More information about the users mailing list