Unlocking user accounts
A user account is locked after a number of successive failed login attempts from the same IP address in the admin or self-service panel:
- 10 failed attempts per hour
- 50 failed attempts per day
- 100 failed attempts per month
- 300 failed attempts per year
A successful login resets the counter. A locked user account is unlocked automatically after the lock expires or can be unlocked manually by a system administrator.
To unlock a user
-
Find the name or ID of a locked user within the domain by using the
vinfra
tool. For example:# vinfra domain user list --domain domain1 --long +---------------+--------+-------+-------------------------------------------------+----------------+--------------------+------+ | id | name | <...> | locked_ips | role | system_permissions | tags | +---------------+--------+-------+-------------------------------------------------+----------------+--------------------+------+ | 646f5793<...> | admin1 | <...> | [] | domain_admin | [] | [] | | | | | | | | | | 899bc00d<...> | user2 | <...> | - ip: 10.35.15.27 | project_member | [] | [] | | | | | lock_expired_at: '2022-09-27T13:17:21.499275' | | | | | f0b9c6d0<...> | user1 | <...> | [] | project_member | [] | [] | | | | | | | | | +---------------+--------+-------+-------------------------------------------------+----------------+--------------------+------+
In this command output, the locked user is
user2
, the locked IP address is 10.35.15.27, and the lock will expire at 13:17 on September 27, 2022. -
Unlock the user account by specifying its name or ID. For example:
# vinfra domain user unlock --domain domain1 user2