Description

After using all of the allowed number of attempts to login for a user and clicking the Forgot your password? link, the following exception can be shown in the browser after entering the username of the locked user:

[MembershipPasswordException: The user account has been locked out.]
   System.Web.Security.SqlMembershipProvider.ResetPassword(String username, String passwordAnswer) +1695
   System.Web.Security.MembershipUser.ResetPassword(String passwordAnswer) +159
   Sitecore.Pipelines.PasswordRecovery.GeneratePassword.Process(PasswordRecoveryArgs args) +52
 
[TargetInvocationException: Exception has been thrown by the target of an invocation.]
   System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) +0
   System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) +128
   System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) +142
   Sitecore.Reflection.ReflectionUtil.InvokeMethod(MethodInfo method, Object[] parameters, Object obj) +89
   Sitecore.Nexus.Pipelines.NexusPipelineApi.Resume(PipelineArgs args, Pipeline pipeline) +313
   Sitecore.Pipelines.Pipeline.Start(PipelineArgs args, Boolean atomic) +167
   Sitecore.sitecore.login.Default.ForgotPasswordClicked(Object sender, EventArgs e) +204
   System.Web.UI.WebControls.Button.OnClick(EventArgs e) +11760128
   System.Web.UI.WebControls.Button.RaisePostBackEvent(String eventArgument) +150
   System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +5028

Solution

To resolve the issue, consider one of the following options:

• Upgrade Sitecore XP instance to 9.1 Initial release or higher (recommended).
• Download and install the patch compatible with the affected product version found on this page: https://github.com/SitecoreSupport/Sitecore.Support.96701/releases.