Release Notes › Policy Server Release Notes › Defects Fixed in SiteMinder Releases › Defects Fixed for 6.0 SP2 › Password Services Handling Account Lockout Fix (34176)

Previous Topic: Password Policy Fix (34086)

Next Topic: Deleting a Rule Caused Policy Server to Fail (34673)
Password Services Handling Account Lockout Fix (34176)

In the Policy Server's Password Services feature, this service pack fixes an error in handling account lockout due to the incorrect number of passwords being exceeded in a password policy.

Previously, if the password policy specified the account to be re-enabled after the lockout delay, users (who exceeded the maximum number of incorrect password attempts) would be incorrectly redirected to the "password expired" page if they again supplied an incorrect password in their first login attempt after the lockout time had passed.

Now, users are allowed to configure a number of bad password attempts immediately after the lockout time has expired.