Invalid user or password or the account is blocked due to multiple failed login attempts
-
Dears,
Out of sudden, i can't log into OpenProject (cloudron installed) with the message: Invalid user or password or the account is blocked due to multiple failed login attempts.
No password was changed - how to unlock the situation?
Many thanks and best regards,
-
-
- it's the admin user which was automatically set up during the installation. (the defaul password has been changed after the first login.)
- the username/password is managed by an app and no one has changed it (it's a very complicated randome generated string). I'm certain it's correct. I've been using it without any issue for like 3 months until yesterday.
- where/how do i find the apps log?
Very much appreciated for your support!
-
Logs can be found via the Cloudron dashboard https://docs.cloudron.io/apps/#log-viewer
I am not really an OpenProject expert, but probably the failed login attempts blocking might be lifted after some time, possibly someone just tried to log in, causing the block? -
plus:
- i read the official open project doc and understood that there's way to manually reset password by Rail console but unfortunately i can't find a way to use "Rail console" under cloudron. Maybe that's something that i can try?
- i googled and found there was someone who had the similar issue and there was an advice to create another user directly in the psql with admin privilege - but unfortunately i also dont know how to create an user directly in the psql.
I really need to access this build due to the data in it. Please help!
-
You can open a terminal into the app container which has env variables set to access the database. https://docs.cloudron.io/apps/#web-terminal
From there you also should be able to open a rails console with
RAILS_ENV="production" ./bin/rails console
but maybe make a backup before to have known state to go back to as https://www.openproject.org/docs/installation-and-operations/operation/faq/#i-lost-access-to-my-admin-account-how-do-i-reset-my-password looks quite lowlevel -
-