User locked, with ERROR 3118 reported

This topic describes how to handle ERROR 3118, where a user is locked in OceanBase Database in Oracle mode.

Symptom

If you enter an incorrect password multiple times when you log on to the Oracle tenant by using the ny user account, the system reports an error indicating that the user is locked.

[admin@k08j13249.eu95sqa /home/admin]
$obclient -hxx.xx.xx.xx -P2881 -uny@Oracle -p -A
Enter password:
ERROR 3118 (HY000): User locked

Possible causes

OceanBase Database provides a mechanism to handle logon failures. If a user fails to log on to OceanBase Database multiple times, OceanBase Database locks the account of the user to prevent malicious password attacks. This improves the security of OceanBase Database. For more information about how to handle logon failures, see Handle logon failures.

Troubleshooting procedure

Take the following steps to unlock the user and log on again.

1. Log on to the tenant as the administrator. The default administrator username of an Oracle tenant is SYS.

   Note

   If you log on as the administrator, you can directly unlock users. If you log on as a regular user, you must have the global ALTER USER privilege to unlock users.

   [admin@k08j13249.eu95sqa /home/admin]
   $obclient -hxx.xx.xx.1 -P2881 -usys@Oracle -p -A
   Enter password:
   Welcome to the OceanBase.  Commands end with ; or \g.
   Your OceanBase connection id is 3221584177
   Server version: OceanBase 4.0.0.0 (r100000172022101218-6ab80a3950710941946c004d805fcfded7a4aa2c) (Built Oct 12 2022 18:43:39)
   
   Copyright (c) 2000, 2018, OceanBase Corporation Ab and others.
   
   Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
   

2. Unlock the ny user.

   obclient [SYS]> ALTER USER ny ACCOUNT UNLOCK ;
   Query OK, 0 rows affected
   

3. Log on as the ny user again.

   [admin@k08j13249.eu95sqa /home/admin]
   $obclient -hxx.xx.xx.1 -P2881 -uny@Oracle -p -A
   Enter password:
   Welcome to the OceanBase.  Commands end with ; or \g.
   Your OceanBase connection id is 3221584177
   Server version: OceanBase 4.0.0.0 (r100000172022101218-6ab80a3950710941946c004d805fcfded7a4aa2c) (Built Oct 12 2022 18:43:39)
   
   Copyright (c) 2000, 2018, OceanBase Corporation Ab and others.
   
   Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.