Unlocking Weblogic Admin User Account
Error:
<Notice> <Security> <BEA-090078> <User xxxxxxx in security realm myrealm has had 5 invalid login attempts, locking account for 30 minutes.>
Cause:
By default WebLogic Server enables the user lockout mechanism which locks a particular user account for 30 minutes, if more than 5 attempts are made to login with wrong password.
Solution:
This behaviour of WebLogic Server can be modified and the WLS Admin can disable the user account lockout on invalid login attempts mechanism by using the steps mentioned below.
Solution 1
1)- Login to the WLS console as an admin user.
2)- In the left hand side tree go to Security => Realms => myrealm.
3)- In the right hand pane select User Lockout tab => Uncheck Lockout Enabled option.
4)- Click Apply.
5)- Restart the server.
Solution 2
Unlock the admin user by following below example:
In the following example, an administrator named "Admin" with a password of "welcome1" requests the unlocking of the WebLogic Server listening on port "7001" on machine "localhost"
$java weblogic.Admin -url <host_name:<port> -username <username> -password <adminpasswd> UNLOCK
How to check whether user is unlocked or not.
Administration Console: Select Admin server -> Expand the Monitoring-->Security tab for the server.
This page allows you to monitor user lockout management statistics for this server.
Total Invalid Logins: 14
User Lockout Total Count: 1
Total Login Attempts while Locked:8
Invalid Logins High: 1
Locked Users: 0
Total Users Unlocked: 1
