For example; due to repeated failed login attempts via SSH/SCP the SDDC Manager ‘vcf’ user account may get locked out. The following provides steps on how to reset the account by accessing the SDDC Mgr VM Console (VMware Photon OS/Linux).

vcfsddcmgrreset1

Note: the current running OS Version of SDDC Manager is ‘VMware Photon OS 3.0′:

cat /etc/os-release

vcfsddcmgrreset8

If this is the only account you have access to via SSH then you may need to open the VM console via ESXi/vCenter and login as root user.

Click on ‘Launch Web Console’:

vcfsddcmgrreset2

Select ‘Web Console’ and click OK:

vcfsddcmgrreset3

Hit return to enter the console and login as root:

vcfsddcmgrreset4

Displaying the number of failed attempts:

pam_tally2 -u username

vcfsddcmgrreset5

Reset the account:

pam_tally2 -u vcf –r

vcfsddcmgrreset6

Sucessfull login attempt by vcf via SSH:

vcfsddcmgrreset7

Note: If you are prepared to wait the account should unlock after 86,400 seconds | 24 Hours.

cat /etc/pam.d/system-auth

vcfsddcmgrreset12a

Check user password expiration using chage:

vcfsddcmgrreset10

The /etc/login.defs file provides default configuration information:

vcfsddcmgrreset11

Useful Reference:

Photon OS Documentation

 

 

Leave a comment