System Administration Guide
Chapter 5, Maintaining system security

Account is disabled but console login is allowed Terminal is disabled but root login is allowed

Account is disabled but console login is allowed Terminal is disabled but root login is allowed

These messages are associated with the superuser logging onto the override terminal. Under the assumption that the console device (including a serial console) is a special device and considered a physical resource worth protecting, a lock on the superuser account does not prevent the superuser from logging into the console. This presents a means for entering the system even when all other accounts or terminals are locked. Before continuing, use the audit trail to investigate the reasons for the lock. A lockout caused by unsuccessful login attempts on the system console is cleared automatically, but lockouts due to other reasons remain in effect. The console, in effect, is never locked out for the superuser.