How to display custom error message in Webtop login page after three invalid login attempts

Hi All,

I am using Webtop 6.5 SP2 version. The requirement is to display custom error message after three invalid login attempts in Webtop login page.

Right now only one error message is displayed always: We're sorry, authentication failed.

We need to change the error message after three invalid login attempts.

Please shed some light on this.

Regards,

Swarup

Find more posts tagged with

Comments

dm_user

Hi,

While logging onLogin Method called. In the exception block you have to put your business logic. If it meets the criteria then set strOutput as the custom message that you want to show. i marked the line in red.

setErrorMessage(strOutput);

public void onLogin(Button loginButton, ArgumentList arg)
    {
        clearErrorMessage();
        RequiredFieldValidator username = (RequiredFieldValidator)getControl0("usernameValidator", true, com/documentum/web/form/control/validator/RequiredFieldValidator);
        username.setEnabled(true);
        username.setVisible(true);
        RequiredFieldValidator userpwd = (RequiredFieldValidator)getControl0("passwordValidator", true, com/documentum/web/form/control/validator/RequiredFieldValidator);
        userpwd.setEnabled(true);
        userpwd.setVisible(true);
        Panel networkLocationPanel = (Panel)getControl("networkLocationPanel");
        if(networkLocationPanel != null && networkLocationPanel.isVisible())
        {
            DataDropDownList networkLocationDropDown = (DataDropDownList)getControl("networkLocationDropDown");
            if(networkLocationDropDown != null && networkLocationDropDown.isVisible())
            {
                RequiredFieldValidator networkLocationDropDownValidator = (RequiredFieldValidator)getControl0("networkLocationDropDownValidator", true, com/documentum/web/form/control/validator/RequiredFieldValidator);
                networkLocationDropDownValidator.setEnabled(true);
                networkLocationDropDownValidator.setVisible(true);
            }
        }
        super.validate();
        if(getIsValid())
            try
            {
                m_strDocbase = ((DataDropDownList)getControl0("docbase", true, com/documentum/web/form/control/databound/DataDropDownList)).getValue();
                m_strUsername = ((Text)getControl("username")).getValue();
                String strPassword = ((Password)getControl("password")).getValue();
                ((Password)getControl("password")).setValue("");
                String serverName = null;
                if(m_contentServerEnabled)
                    serverName = ((DataDropDownList)getControl0("controlserver", true, com/documentum/web/form/control/databound/DataDropDownList)).getValue();
                VisibleRepositoryService visRepSvc = VisibleRepositoryService.getInstance();
                Repository repository = visRepSvc.getVisibleRepository(m_strDocbase);
                String strDocbroker = null;
                String strDocbrokerPort = null;
                if(repository != null)
                {
                    strDocbroker = repository.getDocbrokerName();
                    strDocbrokerPort = repository.getDocbrokerPort();
                }
                if(strDocbroker == null || strDocbroker.length() == 0 || strDocbrokerPort == null || strDocbrokerPort.length() == 0)
                {
                    ConnectionBroker docbroker = (ConnectionBroker)m_newDocbases.get(m_strDocbase);
                    if(docbroker != null)
                    {
                        docbroker.getDocbrokerName();
                        docbroker.getDocbrokerPort();
                    }
                }
                m_strDomain = ((Text)getControl0("domain", true, com/documentum/web/form/control/Text)).getValue();
                try
                {
                    String loginDocbaseName = m_strDocbase;
                    if(serverName != null && serverName.length() > 0)
                        loginDocbaseName = generateDocbaseNameToConnect(m_strDocbase, serverName);
                    authenticate(loginDocbaseName, m_strUsername, strPassword, m_strDomain);
                    SessionManagerHttpBinding.setClientDocbase(m_strDocbase);
                }
                catch(com.documentum.web.formext.session.PasswordExpiredException pe)
                {
                    m_bChangePassword = true;
                }
                if(m_bChangePassword)
                {
                    ArgumentList cpArgs = new ArgumentList();
                    cpArgs.add("username", m_strUsername);
                    cpArgs.add("docbase", m_strDocbase);
                    cpArgs.add("domain", m_strDomain);
                    m_bChangePassword = false;
                    setComponentNested("changepassword", cpArgs, getContext(), this);
                } else
                {
        
                    handleSuccess(m_strDocbase, m_strUsername, strPassword, m_strDomain);
                }
            }
            catch(DfException err)
            {

//put your business login here, to check 3 failure attempts to login.


                String strOutput = getLocalizedError(err.getMessage());
                if(strOutput == null)
                    strOutput = err.getMessage();
                setErrorMessage(strOutput);
            }
    }

Try this and see what happened.

Regards,

Arindam

gyanus

Thank you for your answer.

I have set the maximium authentication attempt to 3 using DA. This will check for the Three login attempts as required, but I am facing problem to display as custom error message.

You have mentioned to add business logic in catch block of onLogin() method. But the problem here to to create a session. I'm trying to check the user_state of dm_user (which will be set to 1 i.e inactive after three login attempts. this is achieved due to the setting I have made in DA). But to check the value of user_state using a DQL query I need session. I am facing problem here. I dont want to create a session by hardcoding the value of username, password and domain. I am trying to create a session of installation owner. I can achieve this by harcoding the installation owners name, password and domain, which I don want to do. Since in my project I have three environment. in each environment the users may change and the installation owner details change too. So I want to make the creation of session general so that even in different environment the same code can work.

Is there any way to do this.

Thank you

Swarup

DCTM_Guru

You dont have to execute query to check for user_state. dm_user has told you where to specify your custom logic to maintain 3 failed attempts. You can do this by writing http session variable.