Environment

• Product line: ZVF
• Component: ZCenter
• Version: 5.1.0
• Trigger condition: The number of consecutive failed login attempts by a user reaches the maximum configured by the system.

Symptoms

A user is locked out after consecutive failed login attempts and can no longer log in to ZCenter.

Diagnosis

The default login lockout parameters in ZCenter 5.1.0 are as follows:

• Maximum number of failed attempts: 5.
• Lockout duration: 30 minutes.

After each failed login attempt, the base:loginFailCount:{userId} counter in Redis is incremented. When the maximum number of failed attempts is reached, the system sets the base:loginLock:{userId} lock flag, whose TTL is the lockout duration.

Cause

After a user has five consecutive failed login attempts, the system's brute-force protection mechanism triggers a login lockout.

Resolution

1. Prerequisites

• If a manual unlock is required, the administrator must first confirm the userId of the locked user.

2. Procedure

Use either of the following methods to unlock the user:

1. Wait for 30 minutes. The system automatically unlocks the user when the lockout duration ends.
2. An administrator deletes the base:loginLock:{userId} key for the user from Redis.

Verification

• After the lockout duration ends automatically or the administrator deletes the lock key, confirm that the user can attempt to log in again.
• Confirm that the lock flag for the user in Redis has expired or been deleted.

Risks and rollback

• Before performing a manual operation, confirm the target userId to avoid affecting the lockout status of other users.
• If no manual unlock is performed, the system automatically unlocks the user after the 30-minute lockout duration ends.