Accidentally disabled the administrator account on IPA server

dan asked:

I’m running ipa-server on Centos 6. I was going through the users disabling accounts and accidentally disabled the “administrator” account. Now I have no access to do anything. Is there any way to restore access to this account? Or to prevent this from happening in the future?

My answer:

Log in with a different account and re-enable it, if you have such an account (you should, in all but the smallest deployments).

As of FreeIPA 3.0, which is included in EL 6.4, it is no longer possible to disable the last administrator account.

View the full question and answer on Server Fault.

Creative Commons License
This work is licensed under a Creative Commons Attribution-ShareAlike 3.0 Unported License.