When an account has been locked due to too many authentication failures, root can unlock the account by this command:
userdbset -d -u username auth_failures