Account is disabled - see Account Administrator

[HPOPSW]

We have a sftp user on one of our HPUX servers (B.11.23 U ia64). Whenever we try to login with this user, we get message

Your password was changed by root
Password:
Account is disabled - see Account Administrator

Even after enabling the user with command /usr/lbin/modprpw -k abcd still we are not able to login with that user. Please assist.

[singh sanjeev]

unlock and extend the life of account
/usr/lbin/modprpw -k -l abcd
/usr/lbin/modprpw -v -l abcd

[Ishwar_1]

Check the Password agging policy for the user. As your System is Running in the Trusted Mode.

Hope this information help you to drill down the problem

Regards
Ishwar

[Anshumali]

1.getprpw abcd
2.See what flag is for the last entry. Which number is carrying 1.
3.read the man of getprpw to see what "1" being at that position means.
4.Action accordingly.

[arun khatwani]

hi ,

the lockout status for user is 0001000

that means: exceeded unsuccessful login attempts

But nobody is trying to get login with that account .

And also if we try to enable the account it doesnot work,

[aaaaaaa:/]# /usr/lbin/modprpw -k -l ediprod;/usr/lbin/getprpw ediprod
uid=150, bootpw=NO, audid=72, audflg=1, mintm=-1, maxpwln=-1, exptm=-1, lftm=-1, spwchg=Sun May 16 04:40:58 2010, upwchg=Thu Jan 14 15:48:01 2010, acctexp=-1, llog=-1, expwarn=-1, usrpick=DFT, syspnpw=DFT, rstrpw=DFT, nullpw=DFT, admnum=-1, syschpw=DFT, sysltpw=DFT, timeod=-1, slogint=Mon Jan 18 21:51:36 2010, ulogint=Sun May 16 04:44:37 2010, sloginy=-1, culogin=15, uloginy=-1, umaxlntr=-1, alock=NO, lockout=0001000
[aaaaaaaa:/]#


even i changed the security polices for the user set it to 99 max incorrect login but again afater some time it has been changed to default.

[singh sanjeev]

Arun,
as per the output of getprpw its look that account has 15times unsuccessfull login, so i assume that you account ediprod may be used iin script ,it will be better to update the password if password has been changed recently.

check:
>lastb -R
>syslog.log for more info how is account is getting locked.

findout ,what is locking the account.

[atul2701]

Hi
it look that someone(user or script) is trying to login to the server. Please check your syslog.log file that from where script or user is trying to login.

grep -i /var/adm/syslog/syslog.log.