[AMBARI-22876] Disable consecutive authentication failure account lockout feature by default

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.7.0
• Fix Version/s: 2.7.0
• Component/s: ambari-server
• Labels: authentication pull-request-available
• Epic Link: Improve User Account Management Within Ambari
• Assignee: Robert Levas
• Reporter: Robert Levas
• Created: 29/Jan/18 22:35
• Updated: 31/Jan/18 10:21
• Resolved: 31/Jan/18 10:21

Description

Disable consecutive authentication failure account lockout feature by default. This feature locks an account after a configured number of failed authentication attempts. By defaulting authentication.local.max.failures to 0, this feature will be disabled by default.

If enabled, a user account may be locked out due to number of authentication failures. There is a REST API call to unlock the user; however a user interface change will not be available until Ambari 3.x.

Issue Links

• links to: GitHub Pull Request #230