forked from docs/doc-exports
Yang, Tong
3b1f73dece
Reviewed-by: Hasko, Vladimir <vladimir.hasko@t-systems.com> Co-authored-by: Yang, Tong <yangtong2@huawei.com> Co-committed-by: Yang, Tong <yangtong2@huawei.com>
24 lines
3.1 KiB
HTML
24 lines
3.1 KiB
HTML
<a name="admin_guide_000245"></a><a name="admin_guide_000245"></a>
|
|
|
|
<h1 class="topictitle1">Unlocking LDAP Users and Management Accounts</h1>
|
|
<div id="body1529658735915"><div class="section" id="admin_guide_000245__section25915775"><h4 class="sectiontitle">Scenario</h4><p id="admin_guide_000245__p4997277">If the LDAP user <strong id="admin_guide_000245__b19339108382">cn=pg_search_dn,ou=Users,dc=hadoop,dc=com</strong> and LDAP management accounts <strong id="admin_guide_000245__b19592121319815">cn=krbkdc,ou=Users,dc=hadoop,dc=com</strong> and <strong id="admin_guide_000245__b148113199816">cn=krbadmin,ou=Users,dc=hadoop,dc=com</strong> are locked, the administrator must unlock these accounts.</p>
|
|
<div class="note" id="admin_guide_000245__note44975500"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p class="text" id="admin_guide_000245__p2126321">If you input an incorrect password for the LDAP user or management account for five consecutive times, the LDAP user or management account is locked. The account is automatically unlocked after 5 minutes.</p>
|
|
</div></div>
|
|
</div>
|
|
<div class="section" id="admin_guide_000245__section13187182422311"><h4 class="sectiontitle">Procedure</h4><ol id="admin_guide_000245__ol63582688"><li id="admin_guide_000245__li35373287"><span>Log in to the active management node as user <strong id="admin_guide_000245__b16715165117910">omm</strong>.</span></li><li id="admin_guide_000245__li46663997"><span>Run the following command to go to the related directory:</span><p><p id="admin_guide_000245__p17322790"><strong id="admin_guide_000245__b63368863112644">cd ${BIGDATA_HOME}/om-server/om/ldapserver/ldapserver/local/script</strong></p>
|
|
</p></li><li id="admin_guide_000245__li60968721"><span>Run the following command to unlock the LDAP user or management account:</span><p><p id="admin_guide_000245__p11847581"><strong id="admin_guide_000245__b39519373">./ldapserver_unlockUsers.sh </strong><em id="admin_guide_000245__i20130041">USER_NAME</em></p>
|
|
<p id="admin_guide_000245__p9891436115413">In the command, <em id="admin_guide_000245__i14891836175417">USER_NAME</em> indicates the name of the user to be unlocked.</p>
|
|
<p id="admin_guide_000245__p46952641">For example, to unlock the LDAP management <strong id="admin_guide_000245__b117577498117">account cn=krbkdc,ou=Users,dc=hadoop,dc=com</strong>, run the following command:</p>
|
|
<p id="admin_guide_000245__p26597492"><strong id="admin_guide_000245__b38050837">./ldapserver_unlockUsers.sh krbkdc</strong></p>
|
|
<p id="admin_guide_000245__p6913218">After the script is executed, enter the password of user <strong id="admin_guide_000245__b137801071124">krbkdc</strong> after <strong id="admin_guide_000245__b1586091516121">ROOT_DN_PASSWORD</strong>. If the following information is displayed, the account is successfully unlocked.</p>
|
|
<pre class="screen" id="admin_guide_000245__screen62218962">Unlock user krbkdc successfully.</pre>
|
|
</p></li></ol>
|
|
</div>
|
|
</div>
|
|
<div>
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="admin_guide_000243.html">Account Security Settings</a></div>
|
|
</div>
|
|
</div>
|
|
|