Unable to unlock users due to special characters
12433
Created On 03/05/19 02:39 AM - Last Modified 08/16/19 22:35 PM
Symptom
Usernames containing special characters gets locked and cannot unlock these users. Also GUI and CLI does not present locked users correctly:
> show authentication locked-users Server error : op command for client authd timed out as client is not available
authd log: debug: _get_authprofile_locksettings(pan_authd_sqlite.c:618): Failed to fetch lock setttings for profile LDAP-Auth-Profile/shared debug: _get_authprofile_locksettings(pan_authd_sqlite.c:618): Failed to fetch lock setttings for profile LDAP-Auth-Profile/shared debug: _get_authprofile_locksettings(pan_authd_sqlite.c:618): Failed to fetch lock setttings for profile LDAP-Auth-Profile-Users/vsys1
Environment
- PAN-OS 7.1
Resolution
Upgrade to PAN-OS version 8.x to resolve issue.
OR (workaround): Reference this article while reaching out to TAC for assistance.