Comment 4 for bug 963098

Hi Joseph,

Thanks for the info.

Actually I want to give a try on this bug in the following way:

1. User types the wrong password for 5 times.
2. Then dashboard need to show the security question for the particular user. [Security question will be shown if user enters correct username. Otherwise wrong username or password error should be displayed.]
3. If the user types the wrong security question's password, the account should be locked and admin only can unlock the account.
4. If the user enters correct answer for the security question, the new password shall be mailed to his email id, if he registers one.

The security question and answer fields can be added to the users table or can be a separate table in the keystone.

This is fine as far as the dashboard is concerned. But as per the comments from Devin, I am thinking about blocking the user from command line arguments.

Please provide your comments.

Regards,
Nag.