return accountLocked(mapping, request, ale, msgs);
} catch (InvalidLoginCredentialsException ex) {
log.error("[" + request.getRemoteHost()
+ "] authentication failed", ex);
LogonForm logonForm = (LogonForm) form;
CoreServlet.getServlet().fireCoreEvent(
new CoreEvent(this, CoreEventConstants.LOGON, null, null, ex).addAttribute(
CoreAttributeConstants.EVENT_ATTR_IP_ADDRESS, request.getRemoteAddr()).addAttribute(
CoreAttributeConstants.EVENT_ATTR_HOST, request.getRemoteHost()).addAttribute(
CoreAttributeConstants.EVENT_ATTR_SCHEME, scheme.getSchemeName()).addAttribute(
CoreAttributeConstants.EVENT_ATTR_ACCOUNT, logonForm.getUsername()));
request.getSession().removeAttribute(LogonStateAndCache.LOGON_STATE_MACHINE);
request.getSession().removeAttribute(Constants.AUTH_SESSION);