Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-28810

Delegated Authentication directories do not track last authenticated time or unsuccessful password attempts in the database

    XMLWordPrintable

Details

    Description

      The Problem

      Internal directories and LDAP Connector directories store 'lastAuthenticated' and 'invalidPasswordAttempts'. Delegated Authentication directories do not.

      In this example, directory_id 32769 is internal, and 1409025 is a delegated auth directory. All 3 user_ids have logged in to the system. As you can see, the two attributes above are not created in the database. This means that admins cannot track when users last logged in.

      +---------+---------+--------------+-------------------------+-----------------+-----------------------+
      | id      | user_id | directory_id | attribute_name          | attribute_value | attribute_lower_value |
      +---------+---------+--------------+-------------------------+-----------------+-----------------------+
      |   98305 |   65537 |        32769 | requiresPasswordChange  | false           | false                 |
      |   98306 |   65537 |        32769 | passwordLastChanged     | 1364446218059   | 1364446218059         |
      |   98307 |   65537 |        32769 | invalidPasswordAttempts | 0               | 0                     |
      |   98308 |   65537 |        32769 | lastAuthenticated       | 1364869098979   | 1364869098979         |
      | 1540101 | 1507331 |      1409025 | requiresPasswordChange  | false           | false                 |
      | 1540102 | 1507331 |      1409025 | passwordLastChanged     | 1364865590909   | 1364865590909         |
      | 1540103 | 1507332 |      1409025 | requiresPasswordChange  | false           | false                 |
      | 1540104 | 1507332 |      1409025 | passwordLastChanged     | 1364865689298   | 1364865689298         |
      +---------+---------+--------------+-------------------------+-----------------+-----------------------+
      

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              dunterwurzacher Denise Unterwurzacher [Atlassian] (Inactive)
              Votes:
              3 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: