备租户用户无法登录，报错：ERROR 1396 (HY000): Operation LOCK USER failed 的原因和解决方法

mysql -hxxx.xxx.xxx.xxx -P2881 -utestuser@obmysql2 -pxxxxxxxx -A -c -Doceanbase
ERROR 1396 (HY000): Operation LOCK USER failed for 'testuser'@'%'

[2025-09-27 14:01:29.037191] WDIAG lock_user (ob_user_cmd_executor.cpp:535) [7215][T1002_MysqlQueu][T1002][xxxxx-xxxxx-xxxxx-xxxxx] [lt=23][errcode=-5155] Operation LOCK USER failed for 'testuser'@'%'
[2025-09-27 14:01:29.037199] WDIAG [SQL.ENG] execute (ob_user_cmd_executor.cpp:491) [7215][T1002_MysqlQueu][T1002][xxxxx-xxxxx-xxxxx-xxxxx] [lt=7][errcode=-5155] Rename user completely failed(arg={tenant_id:1002, users:["testuser"], hosts:["%"], locked:true}, ret=-5155)
[2025-09-27 14:01:29.037255] WDIAG [SERVER] do_query (ob_inner_sql_connection.cpp:799) [7215][T1002_MysqlQueu][T1002][xxxxx-xxxxx-xxxxx-xxxxx] [lt=4][errcode=-5155] result set open failed(ret=-5155, executor={ObIExecutor:, sql:"ALTER USER 'testuser'@'%' ACCOUNT LOCK"})
[2025-09-27 14:01:29.037346] WDIAG [SERVER] query (ob_inner_sql_connection.cpp:944) [7215][T1002_MysqlQueu][T1002][xxxxx-xxxxx-xxxxx-xxxxx] [lt=11][errcode=-5155] execute failed(ret=-5155, tenant_id=1002, executor={ObIExecutor:, sql:"ALTER USER 'testuser'@'%' ACCOUNT LOCK"}, retry_cnt=0, local_sys_schema_version=1758271726590016, local_tenant_schema_version=1758952223311288)
[2025-09-27 14:01:29.037396] WDIAG [SERVER] query (ob_inner_sql_connection.cpp:979) [7215][T1002_MysqlQueu][T1002][xxxxx-xxxxx-xxxxx-xxxxx] [lt=5][errcode=-5155] failed to process record(executor={ObIExecutor:, sql:"ALTER USER 'testuser'@'%' ACCOUNT LOCK"}, record_ret=-5155, ret=-5155)
[2025-09-27 14:01:29.037409] WDIAG [SERVER] query (ob_inner_sql_connection.cpp:1016) [7215][T1002_MysqlQueu][T1002][xxxxx-xxxxx-xxxxx-xxxxx] [lt=5][errcode=-5155] failed to process final(executor={ObIExecutor:, sql:"ALTER USER 'testuser'@'%' ACCOUNT LOCK"}, aret=-5155, ret=-5155)
[2025-09-27 14:01:29.037415] WDIAG [SERVER] execute_write_inner (ob_inner_sql_connection.cpp:1583) [7215][T1002_MysqlQueu][T1002][Y0-0000000000000000-0-0] [lt=5][errcode=-5155] execute sql failed(ret=-5155, tenant_id=1002, sql=ALTER USER 'testuser'@'%' ACCOUNT LOCK)
[2025-09-27 14:01:29.037438] WDIAG [SERVER] execute_write (ob_inner_sql_connection.cpp:1536) [7215][T1002_MysqlQueu][T1002][Y0-0000000000000000-0-0] [lt=6][errcode=-5155] execute_write failed(ret=-5155, tenant_id=1002, sql=ALTER USER 'testuser'@'%' ACCOUNT LOCK, is_user_sql=false)
[2025-09-27 14:01:29.037444] WDIAG [COMMON.MYSQLP] write (ob_mysql_proxy.cpp:240) [7215][T1002_MysqlQueu][T1002][Y0-0000000000000000-0-0] [lt=5][errcode=-5155] execute sql failed(ret=-5155, tenant_id=1002, conn=0x7fafdd0b2d90, start=1758952889032722, sql=ALTER USER 'testuser'@'%' ACCOUNT LOCK)
[2025-09-27 14:01:29.037516] INFO  [SERVER] switch_lock_status_for_user (obmp_connect.cpp:1042) [7215][T1002_MysqlQueu][T1002][Y0-0000000000000000-0-0] [lt=6] user ddl has been sent, change user lock status to (tenant_id=1002, user_name_=testuser, host_name=%, do_lock=true)
[2025-09-27 14:01:29.038109] INFO  [SERVER] process (obmp_connect.cpp:537) [7215][T1002_MysqlQueu][T1002][Y0-0000000000000000-0-0] [lt=4] MySQL LOGIN(direct_client_ip="xxx.xxx.xxx.xxx", client_ip=xxx.xxx.xxx.xxx, tenant_name=obmysql2, tenant_id=1002, user_name=testuser, host_name=xxx.xxx.xxx.xxx, sessid=3221589748, proxy_sessid=0, client_sessid=3221589748, from_proxy=false, from_java_client=false, from_oci_client=false, from_jdbc_client=false, capability=537896589, proxy_capability=0, use_ssl=false, c/s protocol="OB_MYSQL_CS_TYPE", autocommit=false, proc_ret=-5155, ret=-5155, conn->client_type_=3, conn->client_version_=0)

-- 查看其值，若不为 0 就有可能是这个问题。若为 0 就不是这个问题，假设输出值为 5
show parameters like 'connection_control_failed_connections_threshold';

# 登陆用户租户的 root 用户执行
alter system set connection_control_failed_connections_threshold=0;
# 也可以登陆系统租户执行，这里 xxx 是用户租户的租户名
alter system set connection_control_failed_connections_threshold=0 tenant=xxx;

select tenant_id,user_id,user_name,failed_login_attempts from __ALL_virtual_TENANT_USER_FAILED_LOGIN_STAT;

+-----------+---------+-----------+-----------------------+
| tenant_id        | user_id       | user_name     | failed_login_attempts            |
+-----------+---------+-----------+-----------------------+
|      1002         |  500004     | testuser         |                     4                    |
+-----------+---------+-----------+-----------------------+
1 row in set (0.00 sec)

-- 以备租户所在集群的 root@sys 用户登录，直连 OBServer，不能通过 OBProxy 连接
mysql -hxxx.xxx.xxx.xxx -P2881 -utestuser@obmysql2 -pxxxxxxxx -A -c -Doceanbase

-- 切换到该租户的 Meta 租户
alter system change tenant tenant_id = 1001
-- 再次确认该用户的失败登录次数、tenant_id、user_id
select * from __ALL_TENANT_USER_FAILED_LOGIN_STAT where tenant_id=1002 and user_id=500004;
-- 进行清理，可以是 delete，也可以是 update
delete from __ALL_TENANT_USER_FAILED_LOGIN_STAT where tenant_id=1002 and user_id=500004;
update __ALL_TENANT_USER_FAILED_LOGIN_STAT set failed_login_attempts=0 where tenant_id=1002 and user_id=500004;