AIX - How to unlock and reset user’s account

AIX - How to unlock and reset user's account

 
Sometimes a user cannot remote login to an AIX machine might not due to just password expired issue. His/her account might have some other settings that prevent them from logging in. Below is a quick check procedure and how to resolve the issue if it is due to account setting issue.

To check user's account.
=======================================================
root@server # lsuser james
james id=27649 pgrp=staff groups=staff home=/local/users/james shell=/bin/ksh gecos=James SH login=true su=true rlogin=true daemon=true admin=false sugroups=ALL admgroups= tpath=nosak ttys=ALL expires=0 auth1=SYSTEM auth2=NONE umask=27 registry=files SYSTEM=compat logintimes= loginretries=6 pwdwarntime=10 account_locked=false minage=0 maxage=5 maxexpired=3 minalpha=5 minother=2 mindiff=3 maxrepeats=2 minlen=8 histexpire=26 histsize=14 pwdchecks= dictionlist= fsize=-1 cpu=-1 data=-1 stack=-1 core=8192 rss=-1 nofiles=5000 fsize_hard=-1 cpu_hard=-1 data_hard=-1 stack_hard=-1 rss_hard=-1 time_last_login=1393339184 time_last_unsuccessful_login=1340282915 tty_last_login=/dev/pts/14 tty_last_unsuccessful_login=ssh host_last_login=jumpserver.domain.com host_last_unsuccessful_login=tsitsshl304.europe.shell.com unsuccessful_login_count=0 roles=
=======================================================

Make sure the parameters below are having the correct value.
=======================================================
su=true
rlogin=true
daemon=true
expires=0
account_locked=false
unsuccessful_login_count=0 

=======================================================

If the value is incorrect as above, change the value using below command.
=======================================================
root@server # chuser <parameter>=<value> <userid>
root@server # chuser rlogin=true james

=======================================================

Then try to reset the password of the user.
=======================================================
root@server # passwd james
=======================================================

Finally try to login with the new password. If it still fails, check on the parameters again.
#Hint: There is a possibility that OS config like PAM is prohibiting the login.
4 (1)
Article Rating (1 Votes)
Rate this article
Attachments
There are no attachments for this article.
Comments
There are no comments for this article. Be the first to post a comment.
Full Name
Email Address
Security Code Security Code
Related Articles RSS Feed
View mksysb content & restore individual files
Viewed 2868 times since Tue, Jul 17, 2018
Using expect to automate mundane tasks
Viewed 2805 times since Mon, Jun 3, 2019
Setting new device attributes with chdef
Viewed 3375 times since Mon, Jun 3, 2019
AIX - How to monitor CPU usage
Viewed 29933 times since Fri, Jun 8, 2018
Awesome Command to show top 15 processes using memory on AIX
Viewed 25145 times since Thu, Nov 29, 2018
Manages processor scheduler tunable parameters schedo AIX
Viewed 3535 times since Thu, Sep 20, 2018
Installation of the Virtual I/O Server directly from the HMC
Viewed 27420 times since Tue, Jun 4, 2019
IBM AIX commands you should not leave home without
Viewed 8334 times since Mon, Jun 11, 2018
Mirroring the rootvg Volume Group for AIX 4.1/4.2
Viewed 4091 times since Mon, May 21, 2018
A Change to the SMT Mode Default in POWER9
Viewed 6907 times since Fri, Jan 18, 2019