Unlocking user accounts

A user account is locked after a number of successive failed login attempts from the same IP address in the admin or self-service panel:

10 failed attempts per hour
50 failed attempts per day
100 failed attempts per month
300 failed attempts per year

A successful login resets the counter. A locked user account is unlocked automatically after the lock expires or can be unlocked manually by a system administrator.

To unlock a user

Find the name or ID of a locked user within the domain by using the vinfra tool. For example:

# vinfra domain user list --domain domain1 --long
+---------------+--------+-------+-------------------------------------------------+----------------+--------------------+------+
| id            | name   | <...> | locked_ips                                      | role           | system_permissions | tags |
+---------------+--------+-------+-------------------------------------------------+----------------+--------------------+------+
| 646f5793<...> | admin1 | <...> | []                                              | domain_admin   | []                 | []   |
|               |        |       |                                                 |                |                    |      |
| 899bc00d<...> | user2  | <...> | - ip: 10.35.15.27                               | project_member | []                 | []   |
|               |        |       |   lock_expired_at: '2022-09-27T13:17:21.499275' |                |                    |      |
| f0b9c6d0<...> | user1  | <...> | []                                              | project_member | []                 | []   |
|               |        |       |                                                 |                |                    |      |
+---------------+--------+-------+-------------------------------------------------+----------------+--------------------+------+

In this command output, the locked user is user2, the locked IP address is 10.35.15.27, and the lock will expire at 13:17 on September 27, 2022.

Unlock the user account by specifying its name or ID. For example:
```
# vinfra domain user unlock --domain domain1 user2
```