What do I do if my logon password is locked?

This topic describes causes of your logon password being locked when you log on to the console of OceanBase Migration Service (OMS) Community Edition and provides corresponding solutions.

Applicable versions

This topic applies to all versions of OMS Community Edition.

Symptom

When you log on to the console of OMS Community Edition, the system locks your password or prompts you that your password has expired.

Possible causes

• Your have entered an incorrect password in six consecutive attempts. In this case, your account is locked and an error is reported.

• Your password has expired.

Solutions

Password locked

• Solution 1:

  If OMS Community Edition locks your admin account, you can log on to the console of OMS Community Edition as the root user and update the password of the admin account.

  To obtain the logon password of the root user, contact OMS Community Edition Technical Support.

• Solution 2:

  Connect the Meta tenant of OMS Community Edition to the MetaDB cluster, and query the oms_user table in the oms_rm database. If the value of the is_locked field for the ADMIN role is 0, the account is not locked. If the value is 1, the account is locked. If the account is locked, you can run the update command to change the value of the is_locked field to 0. Here is an example:

  # mysql -hxxx.xxx.xxx.xxx -uroot@OMS_META -P2881 -pxxx oms_rm
  mysql: [Warning] Using a password on the command line interface can be insecure.
  Welcome to the MySQL monitor.  Commands end with ; or \g.
  Your MySQL connection id is 3221720053
  Server version: 5.7.25 OceanBase 2.2.77 (r116010032023022813-xxxxd8c1500c21c) (Built Feb 28 2023 13:48:43)
  
  Oracle is a registered trademark of Oracle Corporation and/or its
  affiliates. Other names may be trademarks of their respective
  owners.
  
  Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
  
  mysql> select id,name,role,comment,is_locked from oms_user;
  +--------+-------+-------+--------------------------------+-----------+
  | id     | name  | role  | comment                        | is_locked |
  +--------+-------+-------+--------------------------------+-----------+
  | u00000 | root  | ROOT  | NULL                           |         0 |
  | u00001 | admin | ADMIN | NULL                           |         1 |
  | u00002 | HA    | ROOT  | This role is for HA components, not for users.             |         0 |
  +--------+-------+-------+--------------------------------+-----------+
  3 rows in set (0.02 sec)
  
  mysql> update oms_user set is_locked=0 where name='admin';
  
  mysql> select id,name,role,comment,is_locked from oms_user;
  +--------+-------+-------+--------------------------------+-----------+
  | id     | name  | role  | comment                        | is_locked |
  +--------+-------+-------+--------------------------------+-----------+
  | u00000 | root  | ROOT  | NULL                           |         0 |
  | u00001 | admin | ADMIN | NULL                           |         0 |
  | u00002 | HA    | ROOT  | This role is for HA components, not for users.             |         0 |
  +--------+-------+-------+--------------------------------+-----------+
  3 rows in set (0.01 sec)
  

Password expired

1. Connect the Meta tenant of OMS Community Edition to the MetaDB cluster, and enter the oms_rm database.

   mysql -hxxx.xxx.xxx.xxx -uroot@OMS_META -P2881 -pxxx oms_rm
   

2. Update the value of the oms_normal_config parameter.

   update oms_normal_config set cfg_value='{"rootRolePasswordValidityDays":3650,"rootViewerRolePasswordValidityDays":3650,"adminRolePasswordValidityDays":3650,"adminViewerRolePasswordValidityDays":3650,"userRolePasswordValidityDays":90,"userPasswordValidityDaysTipsThreshold":30}' where cfg_name='oms.user.password.expiration.date.config';