Contents

1   Description

This instruction describes how the administrator can unlock a local Operation and Maintenance (O&M) user account that has been locked out by the system.

The system can operationally lock the password of the user account or it can operationally lock the whole user account. The operational password lock prevents logon using the password authentication. This is visible by the passwordState=LOCKED.The operational lock for the whole user account prevents logon completely. This is visible by the accountState=LOCKED. Both operational locks are removed with the procedure described in this OPI. 

2   Procedure

2.1   Unlock Operational Lock for User Account

Prerequisites

• The instruction references the following documents:
  • Reset Password for User Account
  • Unlock Administrative Lock for User Account
• No tools are required.
• The following conditions must apply:
  • The user has sufficient access rights to perform the task, for example, the user has Local Authentication Administrator role.
  • An Ericsson Command-Line Interface (ECLI) session in Exec mode is in progress.
  • The username for the local user account is known. In this instruction, the username is joedoe.
  • The password state of the account is not EXPIRED. To reset the password for the user, refer to Reset Password for User Account.
  • The account is not administratively locked. To unlock the administrative lock, refer to Unlock Administrative Lock for User Account.

Steps

1. Navigate to the UserAccountM Managed Object (MO), for example:

   >dn ManagedElement=NODE06ST,SystemFunctions=1,SecM=1,UserManagement=1,LocalAuthenticationMethod=1,UserAccountM=1

2. Select user account, for example:

   (UserAccountM=1)>UserAccount=joedoe

3. Unlock the account:

   (UserAccount=joedoe)>unlockOperationalLock

   The system returns an error text if account passwordState is EXPIRED or administrativeState is LOCKED.

4. Verify that the password is unlocked, for example:

   (UserAccount=joedoe)>show passwordState

   The following is an example output:

   passwordState=UNLOCKED

5. Verify that the account is unlocked, for example:

   (UserAccount=joedoe)>show accountState

   The following is an example output:

   accountState=UNLOCKED