For users that have external authentication (UNIX or ldap), rather than GemStone authentication, the password management is done outside of GemStone. However, if login errors would result in a UserProfile being disabled, this was being applied to the GemStone UserProfile, with inconsistent results.
GemStone should never disable accounts that are authenticated outside of GemStone; that should be handled entirely by the authentication system.
Last updated: 2/5/15