Ipa User-unlock

ipa user-unlock --help

Quick Guide: Using ipa user-unlock

To unlock all currently locked users:

ipa user-unlock does change the password. It simply removes the nsaccountlock attribute from the user's LDAP entry and resets the failed login counter in the Kerberos KDC. ipa user-unlock