User locked, with ERROR 3118 reported

This topic describes how to handle ERROR 3118, where a user is locked in the Oracle mode of OceanBase Database.

Symptom

If you enter an incorrect password multiple times when you log on to the Oracle tenant as the ny user, the system reports an error indicating that the user is locked.

[admin@k08j13249.eu95sqa /home/admin]
$obclient -hxx.xx.xx.xx -P2881 -uny@Oracle -p -A
Enter password:
ERROR 3118 (HY000): User locked

Possible causes

OceanBase Database provides a mechanism to handle logon failures. If a user fails to log on to OceanBase Database multiple times, OceanBase Database locks the user to prevent malicious password attacks. This improves the security of OceanBase Database. For more information about how to handle logon failures, see Handle logon failures.

Troubleshooting procedure

Take the following steps to unlock the user and log on again.

1. Log on to the tenant as the administrator. The default administrator user of an Oracle tenant is SYS.

   Note

   If you log on as the administrator, you can directly unlock users. If you log on as a regular user, you must have the global ALTER USER privilege to unlock users.

   [admin@k08j13249.eu95sqa /home/admin]
   $obclient -hxx.xx.xx.1 -P2881 -usys@Oracle -p -A
   Enter password:
   Welcome to the OceanBase.  Commands end with ; or \g.
   Your OceanBase connection id is 3221584177
   Server version: OceanBase 4.0.0.0 (r100000172022101218-6ab80a3950710941946c004d805fcfded7a4aa2c) (Built Oct 12 2022 18:43:39)
   
   Copyright (c) 2000, 2018, OceanBase Corporation Ab and others.
   
   Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
   

2. Unlock the ny user.

   obclient [SYS]> ALTER USER ny ACCOUNT UNLOCK ;
   Query OK, 0 rows affected
   

3. Log on to the Oracle tenant as the ny user again.

   [admin@k08j13249.eu95sqa /home/admin]
   $obclient -hxx.xx.xx.1 -P2881 -uny@Oracle -p -A
   Enter password:
   Welcome to the OceanBase.  Commands end with ; or \g.
   Your OceanBase connection id is 3221584177
   Server version: OceanBase 4.0.0.0 (r100000172022101218-6ab80a3950710941946c004d805fcfded7a4aa2c) (Built Oct 12 2022 18:43:39)
   
   Copyright (c) 2000, 2018, OceanBase Corporation Ab and others.
   
   Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.