[Tickets #14467] authLockUser method missing

[noreply at bugs.horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: https://bugs.horde.org/ticket/14467
------------------------------------------------------------------------------
  Ticket             | 14467
  Created By         | aaronp at critd.com
  Summary            | authLockUser method missing
  Queue              | IMP
  Version            | 6.2.16
  Type               | Bug
  State              | Unconfirmed
  Priority           | 1. Low
  Milestone          |
  Patch              |
  Owners             |
------------------------------------------------------------------------------


aaronp at critd.com (2016-09-12 19:37) wrote:

We're using Horde 5.2.12 and IMP 6.2.16 with PHP 5.6.24. We're trying  
to get Horde to lock out users after a configurable number of failed  
login attempts. We're using IMP/IMAP for authentication. This is  
related to a problem we originally reported to the IMP mailing list:

http://marc.info/?l=imp&m=147369545621876&w=2


We're not sure this was ever working for us. Here are the relevant  
configuration lines we're using:

$conf['auth']['params']['app'] = 'imp';
$conf['auth']['driver'] = 'application';
$conf['auth']['params']['count_bad_logins'] = true;
$conf['auth']['params']['login_block'] = true;
$conf['auth']['params']['login_block_count'] = 5;
$conf['auth']['params']['login_block_time'] = 5;


I can confirm that the failed authentication attempts are correctly  
being inserted into the horde_histories table.

I've done some debugging, and I think I've narrowed it to  
Horde/Core/Auth/Application.php line 231. The lockUser method tries:

$GLOBALS['registry']->callAppMethod($this->_app, 'authLockUser',  
array('args' => array($userId, $time)));


But the method authLockUser doesn't seem to exist. Similarly, the  
authUnlockUser method does not seem to exist. I'm not sure where  
authLockUser should be or if this is a problem with Horde itself or  
IMP. Thanks.