How Do I Unlock a User Locked on Manager?

Symptom

1. When you log in to Manager, the following message is displayed: This account has been locked. Please contact the system administrator to obtain the access permission again.
2. The user is locked on Manager. As a result, jobs cannot be submitted and the Manager page cannot be accessed.
3. When you submit a job in the background and run the kinit username command, the following error message is displayed:

   kinit: Clients credentials have been revoked while getting initial credentials

Possible Causes

The user account is locked because the number of incorrect password attempts exceeds the upper limit.

Handling Procedure

1. Log in to the kadmin background management console.
   1. Log in to the node where the client is installed as user root and run the following command to switch to the client directory, for example, /opt/client. Replace the directory with the actual one.

      cd Client installation path

   2. Run the following command to configure environment variables:

      source bigdata_env

   3. Run the following command and enter the password of user kadmin/admin to access the kadmin console:

      kadmin -p kadmin/admin

      

      The default password for 3.x or later is Admin@123. The default password for versions earlier than 3.x is KAdmin@123.

      After the first login, the system prompts that the password has expired. Change the password as prompted and keep it secure.

2. Run the following command to check whether the value of Failed password attempts is greater than or equal to 5. If yes, the account is locked.

   getprinc Locked username

3. If the account is locked, run the following command to unlock the user and log in to Manager again.

   modprinc -unlock Locked username