topic Re: could not unlock user in General Topics

could not unlock user

rcraxton — Thu, 18 Jan 2024 14:00:17 GMT

Hello,

I'm sure this has been asked before, but I can't find an answer. Get a message of "could not unlock user" via gui. Is there any way to unlock an individual user via CLI? I'm on PAN 10.2.6

Thanks

Rich

Re: could not unlock user

Raido_Rattameister — Thu, 18 Jan 2024 14:23:50 GMT

I have encountered this issue if username is long.

Have not taken time to test how many characters username must be to break GUI unlock feature though 🙂

Try last command.

> find command keyword unlock
debug swm unlock
request authentication unlock-admin user <value>
request authentication unlock-user vsys <value> auth-profile <value> user <value> is-seq <yes|no>

Re: could not unlock user

rcraxton — Thu, 18 Jan 2024 14:48:23 GMT

Server error : failed to unlock. Command used - request authentication unlock-user vsys vsys1 auth-profile Duo-MFA user <username>

not sure what the is-seq is - but syntax error when trying to use.

Re: could not unlock user

Karen_G — Wed, 14 Aug 2024 20:59:13 GMT

Try setting a higher number in the Failed Attempts section and commit the changes.