security compliance lockout_failure_attempts does not work properly in yoga keystone

[Tayebeh Amiri]

I've installed keystone using this https://docs.openstack.org/keystone/yoga/install/keystone-install-ubuntu.html and I've configured security compliance with lockout_failure_attempts=3. after that I've tried to get the token with the wrong password for more than 3 times. unforunately, the user was not locked. how to know what the problem is?

-----------------------------------
Release: 21.0.1.dev9 on 2019-09-18 18:54:05
SHA: e27f80a0a6a62bf4d0e42f5920d7ca0ebd984717
Source: https://opendev.org/openstack/keystone/src/doc/source/install/keystone-install-ubuntu.rst
URL: https://docs.openstack.org/keystone/yoga/install/keystone-install-ubuntu.html

[Jeremy Stanley (fungi)]

After discussing this report with one of the Keystone core reviewers, I'm fairly confident this bug report is a help request and not disclosing an actual security vulnerability, so I've switched it to public now.