-
Story
-
Resolution: Unresolved
-
Medium
-
None
-
None
Original:
A failed authentication attempt MUST NOT identify the reason for the failure to the user, only that the authentication failed.
Modified:
For cases where ONAP is involved in the authentication process, eg LDAP: A failed authentication attempt MUST NOT identify the reason for the failure to the user, only that the authentication failed.