Steps to Reproduce:
1. after 5 failed attempts of login, account gets temporarily blocked and the message appears saying contact to the administrator or reset the password.
2. after clicking on reset password link, reset form appears which generates a one time link.
3. after resetting the password, the user logs in.
4. when the user logs out and logs in again, again a message appears "contact to the administrator or reset the password"
Resolution:
After resetting the password, flood lock should be released for that particular user.
Comments
Comment #2
valthebaldDuplicates #992540: Nothing clears the "5 failed login attempts" security message when a user resets their own password