could not unlock user

[rcraxton]

Hello,

I'm sure this has been asked before, but I can't find an answer.  Get a message of "could not unlock user" via gui.  Is there any way to unlock an individual user via CLI?  I'm on PAN 10.2.6

Thanks

Rich

[Raido_Rattameister]

I have encountered this issue if username is long.

Have not taken time to test how many characters username must be to break GUI unlock feature though 🙂

Try last command.

> find command keyword unlock
debug swm unlock
request authentication unlock-admin user <value>
request authentication unlock-user vsys <value> auth-profile <value> user <value> is-seq <yes|no>

[rcraxton]

Server error : failed to unlock.   Command used - request authentication unlock-user vsys vsys1 auth-profile Duo-MFA user <username>

not sure what the is-seq is - but syntax error when trying to use.

[Karen_G]

Try setting a higher number in the Failed Attempts section and commit the changes.