Dynamic database leases not expiring

We use redshift dynamic user creation, recently we noticed about 12 users had not expired in the databases, i checked leases and there were about the same number with negative TTL’s, i tried to remove them but they did not remove, i removed with --force --prefix and they were removed from vault but did not remove users from db (probably expected with a force)

has anyone else experienced similar behaviour? anyone have any advice on how this can happen and how to fix it.

using vault 1.11.0 hosted in aws / ecs / dynamodb

hi, I faced similar issues with Oracle and MSSQL. Please check journalctl and audit logs, if there are any DB access issues it will be captured there. At times, issues resolved by upgrading to latest version of vault.