[Koha-bugs] [Bug 28822] SIP logins add to login attempts?

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=28822

--- Comment #11 from Nick Clemens <nick at bywatersolutions.com> ---
(In reply to Marcel de Rooy from comment #10)
> Looks like you need someone who knows these third party tools.
> What I do see in the Koha code, is that patron_status and patron_info
> requests when accompanied by a patron password will lead to a verification
> that might increase login_attempts when it is wrong. Note that patron_info
> does not need it to provide output.
> In other words: Does Overdrive perhaps send a empty password string for a
> patron info request?

It can, this is configured per site with OverDrive

There is a SIP configuration setting: allow_empty_passwords

If that is set the login_attempts must not be incremented on an empty password

-- 
You are receiving this mail because:
You are watching all bug changes.
You are the assignee for the bug.