Lockout duration multiplication fix (#729)

OpenIdentityPlatform · Mar 6, 2024 · 6b0d340 · 6b0d340
1 parent 2d73a7f
commit 6b0d340
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/openam-core/src/main/java/com/sun/identity/common/ISAccountLockout.java b/openam-core/src/main/java/com/sun/identity/common/ISAccountLockout.java
@@ -230,6 +230,9 @@ public int invalidPasswd(String userDN, String userName,
         if (((lastFailTime + failureLockoutTime) > now) &&
             (fail_count >= failureLockoutCount)
         ) {
+            if(lockedAt > 0 && failureLockoutMultiplier > 0) { //if was previously locked, multiply duration
+                acInfo.setActualLockoutDuration(acInfo.getActualLockoutDuration() * failureLockoutMultiplier);
+            }
             lockedAt = now;
         }
         if (debug.messageEnabled()) {