Neither messages nor blocking work

Hello,

Just tried the module as well and have the exact same problem, with login tobogan and an out of the box Drupal core 7.39.

Any suggestions?

Best,
Pascal

Same thing here, no messages-no blocking. Just tried to setup blocking host after 5 failed attempts to login in 24 hours window, no success.
Drupal core 7.35 (cannot upgrade to the latest till crucial bugfix happens).

I found out, that if you have logintoboggan with "login via email" enabled, this does not work together with login security. Login security adds it's validate handler before the logintoboggan validate handler, but logintoboggan's validate handler has to come first, as it corrects the username in the form (where the user entered an email address, not a username). I fixed this in a hook form alter in my own module (which has to come AFTER both other modules) and resorted the validate functions like this:

// make sure that logintoboggan comes before login security validate
$logintoboggan_key = array_search('logintoboggan_user_login_validate', $form['#validate']);
if ($logintoboggan_key !== FALSE) {
  unset($form['#validate'][$logintoboggan_key]);
  $form['#validate'] = array_merge(array('logintoboggan_user_login_validate'), $form['#validate']);
}

This is only a workaround for making these two modules working together. Probably there is a better solution possible.

I am not using logintoboggan or other modules interfering with login procedure, but have AES module installed. Could this be of some importance?