davidrb84 Posted August 31, 2023 Share Posted August 31, 2023 I have an analyst who's account is in a suspended state in Hornbill. I can change them back to active without a drama, but intrigued as to the "why"? It is the only account that appears to be erroneously in that state. No other admins are undertaking any work this week on the service from our side. Last login was yesterday and they are a constant user. Is there any log file I can see that might give me a clue? Link to comment Share on other sites More sharing options...
Steve Giller Posted August 31, 2023 Share Posted August 31, 2023 The most likely reason is that multiple attempts to log on to that account failed. This may or may not have been an action by that particular User. You could check the h_sys_security_log table for attempts with h_success of 0 1 Link to comment Share on other sites More sharing options...
davidrb84 Posted August 31, 2023 Author Share Posted August 31, 2023 Ah yes, I can see the h_success = 0 for some direct login attempts, could be user error. I'm intrigued though as I also see a bunch of h_success = 0 failures for SSO logins. But failed SSO logins (e.g. misskeyed passwords) should never get to hornbill as far as I know? Link to comment Share on other sites More sharing options...
Steve Giller Posted August 31, 2023 Share Posted August 31, 2023 It's not really my area, but I believe for SSO the IdP will still return the success/failure value. I'm sure a Developer will correct me if not. 1 Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now