[solved] massive login fails, unknown behaviour

[TomS]

So there seems to be a problem with the login system of the forum.
I don't know hat triggered this, maybe the last update?
This is what Marlin posted in the german board.
I'm translating. It's assumed that he's not the only one with that problem, so please could somebody see into it?

I just tried to log in to the english board.

But the following message was displayed.

You exceeded the maximum allowed number of login attempts. In addition to your username and password you now also have to solve the CAPTCHA below.

I can't guarantee a 100% that I entered the password correctly the first time, but I'm quite certain, that I got it right the second time.
Now there's another (bigger) problem:
Below the message there should be a CAPTCHA to solve,
but I don't see any.

It says:

Confirmation code:
Enter the code exactly as it appears. All letters are case insensitive.

And next to it, there's an input, but no Captcha.

It's not my browsers fault since it doesn't work in Firefox and neither in Konqueror.

[Nituvious]

I just had this problem today. I had to reset my password to get a chance to log back in.

[Marlin]

I just had this problem today. I had to reset my password to get a chance to log back in.

This worked for me too, I'm back in.

Thanks for posting this,
and thanks to TomS for your assistance.

It was at first not entirely obvious to me, that this meant to use the
"I forgot my password" link.

I didn't like to use that, because it was untrue,
as I did not in fact forget my password.

This is the link to the mentioned topic in the German forum,
just for the sake of completeness.

[BillNee]

Hi - that got me in, too. Thanks for the tip. Nice to be back.
Bill Nee

[gnozal]

Same thing happened to me today : I had to use the "I forgot my password" link.

[Fred]

I will take a look, it's probably because of the new captcha system.

[Marlin]

Now, that I read all of this,
2 issues are rather obvious to me:

• The board is or was not set up to hande captchas for failed login attempts.
  This is probably more or less a one time fix.
• There appear to be more [sporadic] failed login attempts.
  If this would turn out to be in a direct technical way connected
  to the new captcha system, I'd be rather relieved.
  My Idea about this, is, that the systems assessment,
  that there were to many failed login attempts is basically correct.
  The question that remains to me, is, whether this is
  a new phenomenon, or just something that was always present
  and is only seen now, because the system enforces the new rules.
  (Unless the max. allowed number of failed loggin attemps was set to 1 or such.)

I'm quite happy, that Fred will look into this.

[Nituvious]

Had it again. It's definitely not that I entered the wrong password because I didn't. Still had request a new password to log in.

[Little John]

Same thing happened to me today : I had to use the "I forgot my password" link.

Exactly the same for me, a few minutes ago.

[marc_1024]

hi,

I could NOT login at all,

So I have a NEW login "marc_1024"
So, the old "marc_256" is no more ...

marc,

[Rook Zimbabwe]

It got me too! on my FIRST login it said I had exceeded the number of login attempts...

The email FRED link was disactivated

there was no CAPTCHA

so I reset the PW and got back in then reset my PW to a new one again...

I wonder if someone isn't trying to BOT ATTACK logins on the board in an attempt to hijack postings???

[Rook Zimbabwe]

hi,

I could NOT login at all,

So I have a NEW login "marc_1024"
So, the old "marc_256" is no more ...

marc,

At least you upgraded to a megabyte! did you try the reset password idea?

[marc_1024]

Yes,
But the answer was that my E-mail address was not found.

Marc

[weavster]

hi,

I could NOT login at all,

So I have a NEW login "marc_1024"
So, the old "marc_256" is no more ...

marc,

I had the same problem, so now I'm no longer the.weavster I'm just plain old weavster.

[marc_1024]

Welcome to the club ...
Now we all start with "One" post
all new-ones ...

Marc,