AIX users are locked out and unable to log on

a problem description

Listening to colleagues,/etc/security/failedlogin (this file records all failed login attempts) has a lot of information about DB2 user logon failures.

I copied the file to the test machine and looked at the file with the strings command, which is really DB2 user:

Db2inst1

Db2inst1

......

I log in with root, su-db2inst1, or connect to DB2, execute SQL command.

Login directly with this account, error:

3004-303 There have been too manyunsuccessful login attempts; Please to the system administrator.

I looked at the DB2 diagnostics log and found a lot of warn:

Password validation for user db2inst1failed with rc =-2146500316

Execute the command db2diag-rc-2146500316 to see what the error means.

Tips:

Description:userid is revoked

two causes of error

When the number of logon failures exceeds the loginretries limit, the account is locked.

Lsuser-a loginretries Db2inst1

Db2inst1 loginretries=5

Lsuser-a Account_lockedunsuccessful_login_count Host_last_unsuccessful_login Db2inst1

Db2inst1 account_locked=falseunsuccessful_login_count=23259826 Host_last_unsuccessful_login=hqportal1

Note: Although the account is actually locked, but I use the root account login, view information, but show account_locked=false, information is not accurate.

three-way solution

Vi/etc/security/lastlog

Change the Unsuccessful_login_count =23259826 into unsuccessful_login_count=0

When you switch from another non-root account to the user, you are prompted to change your password:

[Compat]: 3004-610 You are required tochange your.

Please choose a new one

Baidd ' s New password:

You can change the password.

--This article mainly refers to the http://freebile.blog.51cto.com/447744/769659/, thanks!