mirror of
https://git.openafs.org/openafs.git
synced 2025-01-22 00:41:08 +00:00
100 lines
5.6 KiB
HTML
100 lines
5.6 KiB
HTML
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 4//EN">
|
|
<HTML><HEAD>
|
|
<TITLE>Administration Reference</TITLE>
|
|
<!-- Begin Header Records ========================================== -->
|
|
<!-- /tmp/idwt3672/auarf000.scr converted by idb2h R4.2 (359) ID -->
|
|
<!-- Workbench Version (AIX) on 3 Oct 2000 at 16:18:30 -->
|
|
<META HTTP-EQUIV="updated" CONTENT="Tue, 03 Oct 2000 16:18:29">
|
|
<META HTTP-EQUIV="review" CONTENT="Wed, 03 Oct 2001 16:18:29">
|
|
<META HTTP-EQUIV="expires" CONTENT="Thu, 03 Oct 2002 16:18:29">
|
|
</HEAD><BODY>
|
|
<!-- (C) IBM Corporation 2000. All Rights Reserved -->
|
|
<BODY bgcolor="ffffff">
|
|
<!-- End Header Records ============================================ -->
|
|
<A NAME="Top_Of_Page"></A>
|
|
<H1>Administration Reference</H1>
|
|
<HR><P ALIGN="center"> <A HREF="../index.htm"><IMG SRC="../books.gif" BORDER="0" ALT="[Return to Library]"></A> <A HREF="auarf002.htm#ToC"><IMG SRC="../toc.gif" BORDER="0" ALT="[Contents]"></A> <A HREF="auarf196.htm"><IMG SRC="../prev.gif" BORDER="0" ALT="[Previous Topic]"></A> <A HREF="#Bot_Of_Page"><IMG SRC="../bot.gif" BORDER="0" ALT="[Bottom of Topic]"></A> <A HREF="auarf198.htm"><IMG SRC="../next.gif" BORDER="0" ALT="[Next Topic]"></A> <A HREF="auarf284.htm#HDRINDEX"><IMG SRC="../index.gif" BORDER="0" ALT="[Index]"></A> <P>
|
|
<P>
|
|
<H2><A NAME="HDRKAS_UNLOCK" HREF="auarf002.htm#ToC_211">kas unlock</A></H2>
|
|
<A NAME="IDX5167"></A>
|
|
<A NAME="IDX5168"></A>
|
|
<A NAME="IDX5169"></A>
|
|
<P><STRONG>Purpose</STRONG>
|
|
<P>Unlocks a locked user account
|
|
<P><STRONG>Synopsis</STRONG>
|
|
<PRE><B>kas unlock -name</B> <<VAR>authentication ID</VAR>>
|
|
[<B>-admin_username</B> <<VAR>admin principal to use for authentication</VAR>>]
|
|
[<B>-password_for_admin</B> <<VAR>admin password</VAR>>] [<B>-cell</B> <<VAR>cell name</VAR>>]
|
|
[<B>-servers</B> <<VAR>explicit list of authentication servers</VAR>><SUP>+</SUP>]
|
|
[<B>-noauth</B>] [<B>-help</B>]
|
|
|
|
<B>kas u -na</B> <<VAR>authentication ID</VAR>>
|
|
[<B>-a</B> <<VAR>admin principal to use for authentication</VAR>>]
|
|
[<B>-p</B> <<VAR>admin password</VAR>>] [<B>-c</B> <<VAR>cell name</VAR>>]
|
|
[<B>-s</B> <<VAR>explicit list of authentication servers</VAR>><SUP>+</SUP>] [<B>-no</B>] [<B>-h</B>]
|
|
</PRE>
|
|
<P><STRONG>Description</STRONG>
|
|
<P>The <B>kas unlock</B> command unlocks the Authentication Database entry
|
|
named by the <B>-name</B> argument. An entry becomes locked when
|
|
the user exceeds the limit on failed authentication attempts, generally by
|
|
providing the wrong password to either an AFS-modified login utility or the
|
|
<B>klog</B> command. Use the <B>kas setfields</B> command to
|
|
set the limit and the lockout time, and the <B>kas examine</B> command to
|
|
examine the settings.
|
|
<P>To unlock all locked user accounts at once, shutdown the
|
|
<B>kaserver</B> process on every database server machine, and remove the
|
|
<B>/usr/afs/local/kaauxdb</B> file from each one. The
|
|
<B>kaserver</B> process recreates the file as it restarts.
|
|
<P><STRONG>Options</STRONG>
|
|
<DL>
|
|
<P><DT><B>-name
|
|
</B><DD>Names the Authentication Database entry to unlock.
|
|
<P><DT><B>-admin_username
|
|
</B><DD>Specifies the user identity under which to authenticate with the
|
|
Authentication Server for execution of the command. For more details,
|
|
see the introductory <B>kas</B> reference page.
|
|
<P><DT><B>-password_for_admin
|
|
</B><DD>Specifies the password of the command's issuer. If it is
|
|
omitted (as recommended), the <B>kas</B> command interpreter prompts for
|
|
it and does not echo it visibly. For more details, see the introductory
|
|
<B>kas</B> reference page.
|
|
<P><DT><B>-cell
|
|
</B><DD>Names the cell in which to run the command. For more details, see
|
|
the introductory <B>kas</B> reference page.
|
|
<P><DT><B>-servers
|
|
</B><DD>Names each machine running an Authentication Server with which to
|
|
establish a connection. For more details, see the introductory
|
|
<B>kas</B> reference page.
|
|
<P><DT><B>-noauth
|
|
</B><DD>Assigns the unprivileged identity <B>anonymous</B> to the
|
|
issuer. For more details, see the introductory <B>kas</B> reference
|
|
page.
|
|
<P><DT><B>-help
|
|
</B><DD>Prints the online help for this command. All other valid options
|
|
are ignored.
|
|
</DL>
|
|
<P><STRONG>Examples</STRONG>
|
|
<P>In the following example, an administrator using the <B>admin</B>
|
|
account unlocks the entry for <B>jones</B>:
|
|
<PRE> % <B>kas unlock -name jones -admin_username admin</B>
|
|
Administrator's (admin) Password:
|
|
|
|
</PRE>
|
|
<P><STRONG>Privilege Required</STRONG>
|
|
<P>The issuer must have the <TT>ADMIN</TT> flag set on his or her
|
|
Authentication Database entry.
|
|
<P><STRONG>Related Information</STRONG>
|
|
<P><A HREF="auarf181.htm#HDRKAS_INTRO">kas</A>
|
|
<P><A HREF="auarf185.htm#HDRKAS_EXAMINE">kas examine</A>
|
|
<P><A HREF="auarf193.htm#HDRKAS_SETFIELDS">kas setfields</A>
|
|
<P><A HREF="auarf200.htm#HDRKLOG">klog</A>
|
|
<P>
|
|
<HR><P ALIGN="center"> <A HREF="../index.htm"><IMG SRC="../books.gif" BORDER="0" ALT="[Return to Library]"></A> <A HREF="auarf002.htm#ToC"><IMG SRC="../toc.gif" BORDER="0" ALT="[Contents]"></A> <A HREF="auarf196.htm"><IMG SRC="../prev.gif" BORDER="0" ALT="[Previous Topic]"></A> <A HREF="#Top_Of_Page"><IMG SRC="../top.gif" BORDER="0" ALT="[Top of Topic]"></A> <A HREF="auarf198.htm"><IMG SRC="../next.gif" BORDER="0" ALT="[Next Topic]"></A> <A HREF="auarf284.htm#HDRINDEX"><IMG SRC="../index.gif" BORDER="0" ALT="[Index]"></A> <P>
|
|
<!-- Begin Footer Records ========================================== -->
|
|
<P><HR><B>
|
|
<br>© <A HREF="http://www.ibm.com/">IBM Corporation 2000.</A> All Rights Reserved
|
|
</B>
|
|
<!-- End Footer Records ============================================ -->
|
|
<A NAME="Bot_Of_Page"></A>
|
|
</BODY></HTML>
|