Unlocking administrative accounts

You can learn more about unlocking administrative accounts through the information provided here.

About this task

When an administrator unlocks an account by modifying a local admin group member or master server DN password, the account remains locked until the execution of read configuration exop when new password becomes effective. The password modification for a local admin group member does not take effect until a dynamic configuration update request is made. When an administrator changes a configuration file, the administrator must issue a dynamic update request immediately.

idsldapmodify -D <adminDN> -w <adminPW> -i <filename>

where <filename> contains:

dn: cn=admin1,cn=admingroup,cn=configuration
changetype: modify
replace:ibm-slapdadminpw
ibm-slapdadminpw: newpassword123

To update the settings dynamically, issue the following idsldapexop command:

idsldapexop -D <adminDN> -w <adminPW> -op readconfig -scope entire

Note: When the administrator's account is locked, the only way to unlock the account is by logging on to the local console.