6.7. 检查 IdM 用户帐户是否已被锁住

流程

1. 显示用户帐户的状态，来查看失败的登录次数：

   $ ipa user-status example_user
   -----------------------
   Account disabled: False
   -----------------------
     Server: idm.example.com
     Failed logins: 8
     Last successful authentication: N/A
     Last failed authentication: 20220229080317Z
     Time now: 2022-02-29T08:04:46Z
   ----------------------------
   Number of entries returned 1
   ----------------------------

2. 显示特定用户允许的登录尝试次数：

   $ ipa pwpolicy-show --user example_user
     Group: global_policy
     Max lifetime (days): 90
     Min lifetime (hours): 1
     History size: 0
     Character classes: 0
     Min length: 8
     Max failures: 6
     Failure reset interval: 60
     Lockout duration: 600
     Grace login limit: -1

3. 将 ipa user-status 命令的输出中显示的失败登录数量与 ipa pwpolicy-show 命令的输出中显示的 Max failures number 进行比较。如果失败的登录次数等于最大允许登录尝试次数，则用户帐户被锁住。