- If you are in the middle of an update installation where there is a database update pending you need remove the Content Manager config.xml file. Restart the Apache Tomcat, and Scala Transmission Server services.
- Windows XP or Windows Server 2003: (default path) C:\Documents and Settings \All Users\Application Data\Scala\InfoChannel Content Manager 5\Conf\Config.xml
- Windows 7 or Windows Server 2008 R2: (default path) Select Computer > Local Disk (C) > ProgramData > Scala > InfoChannel Content Manager 5 > Conf > Config.xml
- Corrupted database
- Restore the database in a test environment.
- if it does not work, restore an old database which was working fine.
- Send database backups to support.
Content Manager indeed implements an account lockout policy.
- Restarting Apache Tomcat resets the lockout. If a player is the problem, disconnect the player from network.
- If a player sends a wrong password, users which are behind a router will be banned.
- Content Manager adds a 30-second hold-off after 5 successive failures. This increases by 30 seconds after every five additional failures. This amounts to 2.5 minutes for 10 failures, 15 minutes for 20 failures, and over an hour for 40 failures, and almost 8 hours for 100 failed attempts. An attempt is not counted if the same incorrect password is used as the previous attempt.
- Also, the logic is not to count repeated attempts with the same bad password. This is important so that Players that are misconfigured (therefore repeatedly try the same wrong password) don’t get banned. However, that exception is not really needed for user-logins, and can lead a penetration-tester to conclude that we don’t in fact have anti-breakin defenses.
- REL11.01 change: Repeat attempt to login with the same login/password on a user account will go towards a lockout. However, for a player account, they will not be locked out as long as they repeat the same login/password sequence.
- REL11.05 planned change: add the IP address in the logging message.Sep 6