<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body dir="auto">
<div>There's an option for max fails in the MCB config. Set it to a higher value or disable it. I think there was a bug in some versions where the disabled option was not honored but setting it to 999 would definitely work. </div>
<div><br>
</div>
<div>Paul<br>
<br>
<div><br>
</div>
(Please enjoy the autocorrect features if this phone)</div>
<div><br>
On Apr 3, 2015, at 2:21 PM, IAM David Bantz <<a href="mailto:dabantz@alaska.edu">dabantz@alaska.edu</a>> wrote:<br>
<br>
</div>
<blockquote type="cite">
<div>
<div dir="ltr">If a user fails authN at the IdP three times, our IdP is redirecting the browser to the SP.
<div>
<div><br>
</div>
<div>That's generally not helpful, leaving the user on a generic SP error page.</div>
<div><br>
</div>
<div>Shibboleth IdP 2.4 with MCB.</div>
<div><br>
</div>
<div>I'm seeing the following suspicious entries in the IdP log:</div>
</div>
<div><br>
</div>
<div>
<p class=""><span class="">10:10:57.478 - DEBUG [edu.internet2.middleware.assurance.mcb.authn.provider.MCBLoginServlet:207] - submodule process login returned [false]</span></p>
<p class=""><span class="">10:10:57.478 - DEBUG [edu.internet2.middleware.assurance.mcb.authn.provider.MCBLoginServlet:312] - Current failed login count = [3]</span></p>
<p class=""><span class="">10:10:57.478 - DEBUG [edu.internet2.middleware.assurance.mcb.authn.provider.MCBLoginServlet:156] - Authentication result = [true]</span></p>
<p class=""><span class="">10:10:57.520 - INFO [Shibboleth-Access:73] - 20150403T181057Z|172.20.233.117|<a href="http://idp.alaska.edu">idp.alaska.edu</a>:443|/profile/SAML2/Redirect/SSO|</span></p>
<p class="">What's going on??</p>
<p class="">David Bantz</p>
</div>
</div>
</div>
</blockquote>
<blockquote type="cite">
<div><span>-- </span><br>
<span>To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">
users-unsubscribe@shibboleth.net</a></span></div>
</blockquote>
</body>
</html>