User Accnt Locked - Trusted System

[Just-In]

Hai folks,

Can anybody help me,,

dbnode:root-/>/usr/lbin/getprpw oid
uid=105, bootpw=NO, audid=19, audflg=1, mintm=5, maxpwln=-1, exptm=30, lftm=45, spwchg=Sun Oct 2 00:30:10 2005, upwchg=Sun Oct 2 00:29:38 2005, acctexp=-1, llog=-1, expwarn=7, usrpick=DFT, syspnpw=DFT, rstrpw=DFT, nullpw=DFT, admnum=-1, syschpw=DFT, sysltpw=DFT, timeod=-1, slogint=Fri Sep 30 20:14:43 2005, ulogint=Sun Oct 2 00:07:57 2005, sloginy=pts/0, culogin=17, uloginy=-1, umaxlntr=3, alock=NO, lockout=0001000
dbnode:root-/>/usr/lbin/modprpw -k oid
dbnode:root-/>/usr/lbin/getprpw oid
uid=105, bootpw=NO, audid=19, audflg=1, mintm=5, maxpwln=-1, exptm=30, lftm=45, spwchg=Sun Oct 2 00:30:10 2005, upwchg=Sun Oct 2 00:29:38 2005, acctexp=-1, llog=-1, expwarn=7, usrpick=DFT, syspnpw=DFT, rstrpw=DFT, nullpw=DFT, admnum=-1, syschpw=DFT, sysltpw=DFT, timeod=-1, slogint=Fri Sep 30 20:14:43 2005, ulogint=Sun Oct 2 00:07:57 2005, sloginy=pts/0, culogin=17, uloginy=-1, umaxlntr=3, alock=NO, lockout=0001000


How can I unlock the account. I hav used "modprpw -k" option. Its not getting unlocked..

Thxs n Advance,
Shiv

[Robert-Jan Goossens]

Shiv,

Try,

# /usr/lbin/modprpw -l -k oid

# /usr/lbin/getprpw -m lockout oid

Regards,
Robert-Jan

[Just-In]

Hi Robert,

Its still locked..hereby displayd

dbnode:root-/>/usr/lbin/modprpw -l -k oid
dbnode:root-/>/usr/lbin/getprpw oid
uid=105, bootpw=NO, audid=19, audflg=1, mintm=5, maxpwln=-1, exptm=30, lftm=45, spwchg=Sun Oct 2 02:03:11 2005, upwchg=Sun Oct 2 02:02:49 2005, acctexp=-1, llog=-1, expwarn=7, usrpick=DFT, syspnpw=DFT, rstrpw=DFT, nullpw=DFT, admnum=-1, syschpw=DFT, sysltpw=DFT, timeod=-1, slogint=Fri Sep 30 20:14:43 2005, ulogint=Sun Oct 2 00:07:57 2005, sloginy=pts/0, culogin=17, uloginy=-1, umaxlntr=3, alock=NO, lockout=0001000
dbnode:root-/>/usr/lbin/getprpw -m lockout oid

Regds,
Shiv

[Robert-Jan Goossens]

Could you run a

# authck -pv

Robert-Jan

[Mark Nieuwboer]

shiv,

Can you try to unlock it trough sam.
lockout=0001000 means exceeded unsuccessful login attempts. sometimes modprpw -k doesn't work and sam does reset the unsuccessfull count.

grtz. Mark

[Just-In]

Hi Robert,

Bit perplexed !! Problem gets solved after
bouncing the database...

Thxs for your lightning reponse..

Regds,
Shiv

[Just-In]

Hi Mark,

Actually even the "REACTIVATE" option using the SAM didnt worked. I tried that.

Thxs and Regds,
Shiv

[Cem Tugrul]

Shiv,

Nowadays i often use 2 scripts which i wrote;
these may also help you...

For to to see who are locked;

echo "Users below locked!!!:\r"
for USER in $(listusers | awk '{print $1}')
do
lock_pos=$(/usr/lbin/getprpw -r -m lockout $USER)
user_name=$(grep $USER /etc/passwd|awk -F: '{print $5}')
if [ $lock_pos != "0000000" ]
then
echo "$USER $user_name $lock_pos"
fi
done

So For my system when i run this ;

User below locked!!!:
a8529 Mesut Acar,KB,, 0001000
ut0dy Dursun Yuksel,,, 0001000

so this means my user ut0dy whose name is Dursun Yuksel locked for the reason wrong logins attempts (0001000)and also user a8529
also locked for reason (0001000)

Now..the 2nd script comes for to unlock these
users;

echo `date +"%d_%m_%Y"` `date +"%H:%M`
echo "Users locked below!!!:\r"
for USER in $(listusers | awk '{print $1}')
do
lock_pos=$(/usr/lbin/getprpw -r -m lockout $USER)
user_name0=$(grep $USER /etc/passwd|awk -F: '{print $5}')
if [ $lock_pos != "0000000" ]
then
print "$USER $user_name0"
fi
done
echo "*************************"
echo "Users unlocked below!!!:\r"
for USER in $(listusers | awk '{print $1}')
do
lock_pos=$(/usr/lbin/getprpw -r -m lockout $USER)
user_name1=$(grep $USER /etc/passwd|awk -F: '{print $5}')
if [ $lock_pos != "0000000" ]
then
print "$USER $user_name1"
/usr/lbin/modprpw -k $USER
fi
done

so the output likes;
03_10_2005 13:52
Users locked below!!!:
a8529 Mesut Acar,KB,,
ut0dy Dursun Yuksel,,,
*************************
Users Unlocked below!!!:
a8529 Mesut Acar,KB,,
ut0dy Dursun Yuksel,,,

Hope this Helps...

Good Luck,