Administering Users › Users › How to Unlock User Accounts

How to Unlock User Accounts

Unlock methods unlock an internally authenticated user account that has been locked because it has reached the maximum consecutive failed login attempts or the password has expired and the user is not permitted to change the password.

The following methods are available to unlock user accounts:

• The Locked check box on the User Properties dialog allows a CA Harvest SCM Administrator or a user with Administrative User access to unlock an internally authenticated user account that has been locked because of the following:
  • The user attempts have met the maximum consecutive failed login count.
  • The password has expired and the user is not permitted to change the password.
• A command-line utility, husrunlk, lets an administrator unlock users whose accounts have been locked out.

  Note: For details about the husrunlk command-line utility, see the Command Line Reference Guide.

• If all users in the Administrator user group are locked out, no CA Harvest SCM user can unlock them. You can execute one of the following scripts to unlock a user:

  Oracle:

  HUsrUnlk.sql—This script accepts two arguments: CA Harvest SCM user name (case sensitive) and output log file name.

  SQL Server:

  HUsrUnlk_sqlserver.sql—This script cannot pass arguments. Edit the following identical two lines in the script before running it:

  AND u.username = 'harvest') 
  

  Manually replace harvest with the username that you want to unlock.

  If the user's failure count has exceeded the maximum failed login attempts before lockout value, executing the script resets the user's failure count to 0. This action lets the user attempt to log in again; otherwise, the user receives the override, Change Password at Next Login.

  HUsrUnlk.sql and HUsrUnlk_sqlserver.sql are located in the directory Database under CA_SCM_HOME. To run the scripts successfully, you must have access to update the database using the relational database management system (RDBMS). To run the script, use the following syntax:

  Oracle:

  sqlplus Harvest owner/password @HUsrUnlk.sql username log_file
  

  SQL Server:

  osql -d HarvestDBname -i HUsrUnlk_sqlserver.sql -U owner -P password -e -b -o HUsrUnlk_sqlserver.log