Cups Web Interface racking up "failed" password attempts in Linux

[Lucille Rosenberger]

Using the following version of cups and Linux 5.2
cups-1.2.4-11.18.el5

When using the CUPS web interface to manage printers such as stopping or starting a printer, the application asks for a user name and password.  Even when using the correct user name and password, many times it notes it as incorrect and is counted in the Linux failed password attempts (due to SOX policy we must lock out at 3 attempts).   Sometimes just one attempt will count as 2 or more failures.  When going to faillog -a there are numerous "failures" when only one attempt has been made with the CORRECT password.  It is very frustrating having to constantly use faillog -r to clear technicians' Linux logins when they are using the correct password.  Seems something is amiss between Linux and the Cups web interface.  Any ideas?