Ipa User-unlock May 2026

How long the user stays locked out before the system automatically tries to re-enable them (if configured).

If you receive an "Insufficient access" error, ensure your current Kerberos ticket has the rights to modify user accounts. You can verify your current identity with the klist command. Unlocking via the Web UI If you prefer a graphical interface over the CLI: Log in to the . Navigate to the Identity tab -> Users . Search for and click on the locked User . Look for the Actions dropdown menu at the top right. ipa user-unlock

Select . (If the user isn't locked, this option may be greyed out or hidden). Best Practices for Administrators How long the user stays locked out before