lockout=0000001

[Vishu]

HI,

One user account is saying lockout=0000001 in getprpw output. it says it has asterisk in password field..i checked and (*) asterisk was there in password field in tcb directory.

Please tell what does it mean?

is that account locked?

i tried unlocking, but failed..how to unlock it?

and What is the password of this account?

Thanks

Vishu

[Patrick Wallek]

Yes, that account is locked.  Any value other than a '0' in all positions in the lockout parameter indicates that the account is locked.

There is no password on the account.  Someone has manually set it to have the '*' in the password field.

To unlock this account you will have to set its password to some value, then run 'modprpw -k' .

[rariasn]

Hi:

Edit tcb file for user and modify  next entry:

:u_pwd=*:\

to

:u_pwd=abc:\

and change password for the user.

rgs,

[Arunabha Banerjee]

# /usr/lbin/modprpw -k username   (To unlock the user)

# /usr/lbin/modprpw -v username   (To reset the password lifetime value to 0)

# passwd username                         (Reset the user password)

[Vijaya Ragavan_1]

Hi

   Please tell what does it mean?

lockout=0000001
lockout        returns the reason for a lockout in a "bit" valued
                          string, where 0 = condition not present, 1 is
                          present.  The position, left to right represents:

                          1 past password lifetime
                          2 past last login time (inactive account)
                          3 past absolute account lifetime
                          4 exceeded unsuccessful login attempts
                          5 password required and a null password
                          6 admin lock
                          7 password is a *

is that account locked?

Yes

i tried unlocking, but failed..how to unlock it?

/usr/lbin/modprpw -k username


and What is the password of this account?
Sorry you can't get the password for this account.you can reset the password with the support of superuser

[rariasn]

Hi:

man modprpw

 -k   To unlock/enable a user's account that has become disabled,   except when the lock is due to a missing password or * password.

rgs,