"account locked" when running ::> systemshell commands | NetApp | Page 1

vernal hare Aug 1, 2024, 7:51 PM

#

I am confused. the account I ssh in with is not locked. And I can drop into the node shells and run commands without incidence.

spark sundial Aug 1, 2024, 7:52 PM

#

examples?

vernal hare Aug 1, 2024, 7:54 PM

#

Any command. Date.

spark sundial Aug 1, 2024, 7:56 PM

#

more please: ssh user@cluster date ?
Please, just more info here may be useful

vernal hare Aug 1, 2024, 7:57 PM

#

I ssh to cluster

spark sundial Aug 1, 2024, 7:57 PM

#

how about just send output of what is failing? for context

vernal hare Aug 1, 2024, 7:57 PM

#

FRom the CLI, systemshell commands fail bc locked account

#

but run local -command works fine

spark sundial Aug 1, 2024, 7:58 PM

#

"system node run -node local command" uses the diag user if I am not mistaken. So that diag account is likely unlocked

vernal hare Aug 1, 2024, 7:59 PM

#

set d enabled for both

unkempt hinge Aug 1, 2024, 7:59 PM

#

is diag user unlocked?

vernal hare Aug 1, 2024, 8:01 PM

#

That's not a user I see listed under >security login show

#

on another cluster, it works fine, and running -command "whoami" returns "diag"

unkempt hinge Aug 1, 2024, 8:12 PM

#

security login show -username diag

#

what's that show on the not working cluster

vernal hare Aug 1, 2024, 8:13 PM

#

Not locked.

#

doh, was in wrong wingow, yep it's locked

spark sundial Aug 1, 2024, 8:15 PM

#

There is an option to bypass the diag user lock though...hang on

vernal hare Aug 1, 2024, 8:16 PM

#

I just unlocked it and it works now

spark sundial Aug 1, 2024, 8:16 PM

#

system systemshell-config modify -allow-cmd-while-locked true

signal tinsel Aug 5, 2024, 9:16 PM

#

You have to unlock it.

#

securityadmin user unlock --user diag

#"account locked" when running ::> systemshell commands