Unlocking user accounts

A user account is locked after a number of successive failed login attempts from the same IP address in the admin or self-service panel:

  • 10 failed attempts per hour
  • 50 failed attempts per day
  • 100 failed attempts per month
  • 300 failed attempts per year

A successful login resets the counter. A locked user account is unlocked automatically after the lock expires or can be unlocked manually by a system administrator.

To unlock a user

  1. Find the name or ID of a locked user within the domain by using the vinfra tool. For example:

    # vinfra domain user list --domain domain1 --long
    +---------------+--------+-------+-------------------------------------------------+----------------+--------------------+------+
    | id            | name   | <...> | locked_ips                                      | role           | system_permissions | tags |
    +---------------+--------+-------+-------------------------------------------------+----------------+--------------------+------+
    | 646f5793<...> | admin1 | <...> | []                                              | domain_admin   | []                 | []   |
    |               |        |       |                                                 |                |                    |      |
    | 899bc00d<...> | user2  | <...> | - ip: 10.35.15.27                               | project_member | []                 | []   |
    |               |        |       |   lock_expired_at: '2022-09-27T13:17:21.499275' |                |                    |      |
    | f0b9c6d0<...> | user1  | <...> | []                                              | project_member | []                 | []   |
    |               |        |       |                                                 |                |                    |      |
    +---------------+--------+-------+-------------------------------------------------+----------------+--------------------+------+

    In this command output, the locked user is user2, the locked IP address is 10.35.15.27, and the lock will expire at 13:17 on September 27, 2022.

  2. Unlock the user account by specifying its name or ID. For example:

    # vinfra domain user unlock --domain domain1 user2