The terminal will confirm the action with a message like: Unlocked user "jdoe" . Key Considerations
The output will display the krbLoginFailedCount . If this number exceeds the policy limit, the user is effectively locked out.
While users can wait for the lockout timer to expire, administrators often need to restore access immediately. The ipa user-unlock command is the fastest way to do this.
If you see nsaccountlock: TRUE , the account is locked. After running ipa user-unlock , re-run the check; nsaccountlock should be removed.
Ipa User-unlock -
The terminal will confirm the action with a message like: Unlocked user "jdoe" . Key Considerations
The output will display the krbLoginFailedCount . If this number exceeds the policy limit, the user is effectively locked out.
While users can wait for the lockout timer to expire, administrators often need to restore access immediately. The ipa user-unlock command is the fastest way to do this.
If you see nsaccountlock: TRUE , the account is locked. After running ipa user-unlock , re-run the check; nsaccountlock should be removed.