LockoutPolicy.lockDuration And LockoutPolicy.resetAfter Do Not Work

[LeoNerdoG]

When setting LockoutPolicy.lockDuration and LockoutPolicy.resetAfter to some random number there is no change in lock behaviour.

Testflow:

1. log into kapua-sys
2. create new child account (e.g. kapua-child1) and add new user (e.g. kapua-user1)
3. Set parameters to:

• LockoutPolicy.resetAfter: 10 (seconds)
• LockoutPolicy.lockDuration: 60 (seconds)

4. give kapua-user1 ALL permissions
5. log out as kapua-sys and try to log into kapua-user1 (entering wrong password)
   Both values of these settings get somehow ignored (just like at LockoutPolicy.maxFailures).
   Error reported:
   Login Failed.
   Your user has been locked. Contact your account administrator to unlock.

Browsers used (although this is not a browser issue):

• Google Chrome (Version 61.0.3163.100 (Official Build) (64-bit))
• Safari (Version 11.0 (12604.1.38.1.7))
• Mozilla Firefox (56.0.1 (64-bit))
• Opera (Version 48.0.2685.39)