opensource/cloudpods
3
0
Fork 0
mirror of https://github.com/yunionio/cloudpods.git synced 2026-09-21 14:19:49 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix: do not lock system account user

Browse Source
This commit is contained in:
Qiu Jian
2021-08-31 17:44:46 +08:00
parent 8fbd42e535
commit 5afb0c82a8
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pkg/keystone/driver/sql/sql.go
+2 -1
View File
@@ -70,7 +70,8 @@ func (sql *SSQLDriver) Authenticate(ctx context.Context, ident mcclient.SAuthent
err = models.VerifyPassword(usrExt, ident.Password.User.Password)
if err != nil {
localUser.SaveFailedAuth()
if o.Options.PasswordErrorLockCount > 0 && localUser.FailedAuthCount > o.Options.PasswordErrorLockCount {
if o.Options.PasswordErrorLockCount > 0 && localUser.FailedAuthCount > o.Options.PasswordErrorLockCount && !usrExt.IsSystemAccount {
// do not lock system account!!!
models.UserManager.LockUser(usrExt.Id, "too many failed auth attempts")
sql.alertNotify(ctx, usrExt, time.Now())
return nil, errors.Wrap(httperrors.ErrTooManyAttempts, "user locked")