2005-12-08 12:14:33 +00:00
|
|
|
=head1 NAME
|
|
|
|
|
2007-11-11 22:54:56 +00:00
|
|
|
kas_unlock - Unlocks a locked user account
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
=head1 SYNOPSIS
|
|
|
|
|
2006-03-01 05:02:29 +00:00
|
|
|
=for html
|
|
|
|
<div class="synopsis">
|
|
|
|
|
|
|
|
B<kas unlock> S<<< B<-name> <I<authentication ID>> >>>
|
|
|
|
S<<< [B<-admin_username> <I<admin principal to use for authentication>>] >>>
|
|
|
|
S<<< [B<-password_for_admin> <I<admin password>>] >>> S<<< [B<-cell> <I<cell name>>] >>>
|
|
|
|
S<<< [B<-servers> <I<explicit list of authentication servers>>+] >>>
|
2005-12-13 19:21:13 +00:00
|
|
|
[B<-noauth>] [B<-help>]
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2006-03-01 05:02:29 +00:00
|
|
|
B<kas u> S<<< B<-na> <I<authentication ID>> >>>
|
|
|
|
S<<< [B<-a> <I<admin principal to use for authentication>>] >>>
|
|
|
|
S<<< [B<-p> <I<admin password>>] >>> S<<< [B<-c> <I<cell name>>] >>>
|
|
|
|
S<<< [B<-s> <I<explicit list of authentication servers>>+] >>> [B<-no>] [B<-h>]
|
|
|
|
|
|
|
|
=for html
|
|
|
|
</div>
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
=head1 DESCRIPTION
|
|
|
|
|
2005-12-13 19:21:13 +00:00
|
|
|
The B<kas unlock> command unlocks the Authentication Database entry named
|
|
|
|
by the B<-name> argument. An entry becomes locked when the user exceeds
|
|
|
|
the limit on failed authentication attempts, generally by providing the
|
|
|
|
wrong password to either an AFS-modified login utility or the B<klog>
|
|
|
|
command. Use the B<kas setfields> command to set the limit and the lockout
|
|
|
|
time, and the B<kas examine> command to examine the settings.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2005-12-13 19:21:13 +00:00
|
|
|
To unlock all locked user accounts at once, shutdown the B<kaserver>
|
|
|
|
process on every database server machine, and remove the
|
|
|
|
F</usr/afs/local/kaauxdb> file from each one. The B<kaserver> process
|
|
|
|
recreates the file as it restarts.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
=head1 OPTIONS
|
|
|
|
|
|
|
|
=over 4
|
|
|
|
|
2005-12-13 19:21:13 +00:00
|
|
|
=item B<-name> <I<authentication ID>>
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
Names the Authentication Database entry to unlock.
|
|
|
|
|
2005-12-13 19:21:13 +00:00
|
|
|
=item B<-admin_username> <I<admin principal>>
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
Specifies the user identity under which to authenticate with the
|
2005-12-13 19:21:13 +00:00
|
|
|
Authentication Server for execution of the command. For more details, see
|
|
|
|
L<kas(8)>.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2005-12-13 19:21:13 +00:00
|
|
|
=item B<-password_for_admin> <I<admin password>>
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2005-12-13 19:21:13 +00:00
|
|
|
Specifies the password of the command's issuer. If it is omitted (as
|
|
|
|
recommended), the B<kas> command interpreter prompts for it and does not
|
|
|
|
echo it visibly. For more details, see L<kas(8)>.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2005-12-13 19:21:13 +00:00
|
|
|
=item B<-cell> <I<cell name>>
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
Names the cell in which to run the command. For more details, see
|
2005-12-13 19:21:13 +00:00
|
|
|
L<kas(8)>.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2005-12-13 19:21:13 +00:00
|
|
|
=item B<-servers> <I<authentication servers>>+
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
Names each machine running an Authentication Server with which to
|
2005-12-13 19:21:13 +00:00
|
|
|
establish a connection. For more details, see L<kas(8)>.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2005-12-13 19:21:13 +00:00
|
|
|
=item B<-noauth>
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2005-12-13 19:21:13 +00:00
|
|
|
Assigns the unprivileged identity C<anonymous> to the issuer. For more
|
|
|
|
details, see L<kas(8)>.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2005-12-13 19:21:13 +00:00
|
|
|
=item B<-help>
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2005-12-13 19:21:13 +00:00
|
|
|
Prints the online help for this command. All other valid options are
|
|
|
|
ignored.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
=back
|
|
|
|
|
|
|
|
=head1 EXAMPLES
|
|
|
|
|
2005-12-13 19:21:13 +00:00
|
|
|
In the following example, an administrator using the C<admin> account
|
|
|
|
unlocks the entry for C<jones>:
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
% kas unlock -name jones -admin_username admin
|
|
|
|
Administrator's (admin) Password:
|
|
|
|
|
|
|
|
=head1 PRIVILEGE REQUIRED
|
|
|
|
|
2005-12-13 19:21:13 +00:00
|
|
|
The issuer must have the C<ADMIN> flag set on his or her Authentication
|
|
|
|
Database entry.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
=head1 SEE ALSO
|
|
|
|
|
2005-12-13 19:21:13 +00:00
|
|
|
L<kas(8)>,
|
|
|
|
L<kas_examine(8)>,
|
|
|
|
L<kas_setfields(8)>,
|
2005-12-08 12:14:33 +00:00
|
|
|
L<klog(1)>
|
|
|
|
|
|
|
|
=head1 COPYRIGHT
|
|
|
|
|
|
|
|
IBM Corporation 2000. <http://www.ibm.com/> All Rights Reserved.
|
|
|
|
|
|
|
|
This documentation is covered by the IBM Public License Version 1.0. It was
|
|
|
|
converted from HTML to POD by software written by Chas Williams and Russ
|
|
|
|
Allbery, based on work by Alf Wachsmann and Elizabeth Cassell.
|