System Administration
cancel
Showing results for 
Search instead for 
Did you mean: 

Account is disabled - see Account Administrator

HPOPSW
Advisor

Account is disabled - see Account Administrator

We have a sftp user on one of our HPUX servers (B.11.23 U ia64). Whenever we try to login with this user, we get message

Your password was changed by root
Password:
Account is disabled - see Account Administrator

Even after enabling the user with command /usr/lbin/modprpw -k abcd still we are not able to login with that user. Please assist.
6 REPLIES
singh sanjeev
Trusted Contributor

Re: Account is disabled - see Account Administrator

unlock and extend the life of account
/usr/lbin/modprpw -k -l abcd
/usr/lbin/modprpw -v -l abcd
Sanjeev Singh
Ishwar_1
Frequent Advisor

Re: Account is disabled - see Account Administrator


Check the Password agging policy for the user. As your System is Running in the Trusted Mode.

Hope this information help you to drill down the problem

Regards
Ishwar
Anshumali
Esteemed Contributor

Re: Account is disabled - see Account Administrator

1.getprpw abcd
2.See what flag is for the last entry. Which number is carrying 1.
3.read the man of getprpw to see what "1" being at that position means.
4.Action accordingly.
Dreams are not which you see while sleeping, Dreams are which doesnt allow you to sleep while you are chasing for them!!
arun khatwani
Frequent Advisor

Re: Account is disabled - see Account Administrator

hi ,

the lockout status for user is 0001000

that means: exceeded unsuccessful login attempts

But nobody is trying to get login with that account .

And also if we try to enable the account it doesnot work,

[aaaaaaa:/]# /usr/lbin/modprpw -k -l ediprod;/usr/lbin/getprpw ediprod
uid=150, bootpw=NO, audid=72, audflg=1, mintm=-1, maxpwln=-1, exptm=-1, lftm=-1, spwchg=Sun May 16 04:40:58 2010, upwchg=Thu Jan 14 15:48:01 2010, acctexp=-1, llog=-1, expwarn=-1, usrpick=DFT, syspnpw=DFT, rstrpw=DFT, nullpw=DFT, admnum=-1, syschpw=DFT, sysltpw=DFT, timeod=-1, slogint=Mon Jan 18 21:51:36 2010, ulogint=Sun May 16 04:44:37 2010, sloginy=-1, culogin=15, uloginy=-1, umaxlntr=-1, alock=NO, lockout=0001000
[aaaaaaaa:/]#


even i changed the security polices for the user set it to 99 max incorrect login but again afater some time it has been changed to default.

singh sanjeev
Trusted Contributor

Re: Account is disabled - see Account Administrator

Arun,
as per the output of getprpw its look that account has 15times unsuccessfull login, so i assume that you account ediprod may be used iin script ,it will be better to update the password if password has been changed recently.

check:
>lastb -R
>syslog.log for more info how is account is getting locked.

findout ,what is locking the account.
Sanjeev Singh
atul2701
Frequent Advisor

Re: Account is disabled - see Account Administrator

Hi
it look that someone(user or script) is trying to login to the server. Please check your syslog.log file that from where script or user is trying to login.

grep -i /var/adm/syslog/syslog.log.
Atul Gupta