In a few clicks, you can find any user accounts that expired, so you can determine whether they are still needed or can be deleted as part of IT housekeeping procedures. You can easily filter the results and export the list of expired user accounts to any of multiple file formats, including CSV.
- Processmaker User's Account Has Expired
- Change Expired Password Remote Desktop
- User Account Has Expired
- User Account Has Expired Ad
- Su: User Account Has Expired
- The SQL user (the SQL login account which the Controller application server uses to connect to the database) has an expired password. More Information By default, when creating a new SQL login (on modern versions of SQL) several password options are enabled, for example.
- 8) Find the user that looks like your Microsoft account. It won't say Microsoft account on it, but look for the account that has the same user name. 9) Right-click on that account name. 10) A 'Properties' window will pop-up. 11) The 'General' tab should be showing. 12) Un-check the box 'User must change password at next login'.
Hi
![User User](https://docs.kentico.com/k10/files/62069598/62069599/1/1435840582619/Locked_account.png)
I’m unable to login via ssh to an ipa client or server as the admin user or a new user. This a new installation of the ipa server and clients.
I’ve saved some of the error messages:
I created a test user (tuser). I was able to su – tuser successfully. I was not able to ssh to the master ipa server or any of the clients.
Below I have some information from the sssd log, the command ipa hbactest, and the secure log.
If you need any other info please let me know.
Thanks
Jeff
sssd_<domainname>.log
sh tuser pcs1dc01
Mar 16 12:39:53 pcs1dc01 authpriv.info sshd[30792]: Set /proc/self/oom_score_adj to 0
Mar 16 12:39:53 pcs1dc01 authpriv.info sshd[30792]: Connection from 10.109.4.20 port 60969
Processmaker User's Account Has Expired
![User account has expired for illegal user User account has expired for illegal user](/uploads/1/1/1/8/111812435/965426803.jpg)
Mar 16 12:39:53 pcs1dc01 authpriv.info sshd[30792]: Failed publickey for tuser from 10.109.4.20 port 60969 ssh2
Password: Mar 16 12:39:53 pcs1dc01 authpriv.info sshd[30793]: Postponed keyboard-interactive for tuser from 10.109.4.20 port 60969 ssh2
Change Expired Password Remote Desktop
Mar 16 12:40:57 pcs1dc01 authpriv.notice sshd[30795]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.109.4.20 user=tuser
Mar 16 12:40:57 pcs1dc01 authpriv.info sshd[30795]: pam_sss(sshd:auth): authentication success; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.109.4.20 user=tuser
Mar 16 12:40:57 pcs1dc01 authpriv.notice sshd[30795]: pam_sss(sshd:account): Access denied for user tuser: 6 (Permission denied)
Mar 16 12:40:57 pcs1dc01 authpriv.err sshd[30792]: error: PAM: User account has expired for tuser from 10.109.4.20
Mar 16 12:40:57 pcs1dc01 authpriv.info sshd[30792]: Failed keyboard-interactive/pam for tuser from 10.109.4.20 port 60969 ssh2
Received disconnect from UNKNOWN: 2: Too many authentication failures for tuser
Mar 16 12:40:57 pcs1dc01 authpriv.info sshd[30793]: Disconnecting: Too many authentication failures for tuse
Command: ipa hbactest
User name: tuser
Target host: <server>
User Account Has Expired
Service: ssh
User Account Has Expired Ad
---------------------
Access granted: False
---------------------
Not matched rules: GUI_ACCESS
Not matched rules: SSH_ACCESS
Secure log
Mar 16 12:29:55 authpriv.notice sshd[30697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost= <ip-address> user=tuser
Mar 16 12:29:56 authpriv.info sshd[30697]: pam_sss(sshd:auth): authentication success; logname= uid=0 euid=0 tty=ssh ruser= rhost=<ip-address> user=tuser
Mar 16 12:29:56 authpriv.notice sshd[30697]: pam_sss(sshd:account): Access denied for user tuser: 6 (Permission denied)
Mar 16 12:29:56 authpriv.err sshd[30694]: error: PAM: User account has expired for tuser from 10.109.4.20
Mar 16 12:29:56 authpriv.info sshd[30694]: Failed keyboard-interactive/pam for tuser from <ipaddress> port 60942 ssh2
Su: User Account Has Expired
Received disconnect from UNKNOWN: 2: Too many authentication failures for tuser
Mar 16 12:29:56 authpriv.info sshd[30695]: Disconnecting: Too many authentication failures for tuser