Contents

1   Introduction

This document describes how the administrator can unlock a local Operation and Maintenance (O&M) user account that has been locked out by the system, for example, because of too many failed logon attempts, password aging, or too long user inactivity.

1.1   Prerequisites

This section describes the prerequisites, which must be fulfilled before using the procedure.

1.1.1   Conditions

The following conditions must apply:

• The user has sufficient access rights to perform the task, for example, the user has Local Authentication Administrator role.
• An Ericsson Command-Line Interface (ECLI) session in Exec mode is in progress.
• The username for the local user account is known. In this document, username is joedoe.
• The password state of the account is not EXPIRED. To reset the password for the user, refer to Reset Password for User Account.
• The account is not administratively locked. To unlock the administrative lock, refer to Unlock Administrative Lock for User Account.

2   Procedure

To unlock the account for a local O&M user:

1. Navigate to the UserAccountM Managed Object (MO), for example:

   >dn ManagedElement=NODE06ST,SystemFunctions=1,SecM=1,UserManagement=1,LocalAuthenticationMethod=1,UserAccountM=1

2. Select user account, for example:

   (UserAccountM=1)>UserAccount=joedoe

3. Unlock the account:

   (config-UserAccount=joedoe)>unlockOperationalLock

   The system returns an error text if account passwordState is EXPIRED or administrativeState is LOCKED.

4. Verify that the account is unlocked, for example:

   (UserAccount=joedoe)>show accountState

   The following is an example output:

   accountState=UNLOCKED