The client is told that the user name or password is invalid. In the log I see two rows, the first showing user name (IP) trying to log in by http-pap, and hotstop info debug, the second row showed invalid user. This is strange because the user was working and logging in for some weeks already.