topic Re: script to check user account status -- HP-UX 11 trusted sys in Operating System - HP-UX

script to check user account status -- HP-UX 11 trusted sys

Kristopher March — Mon, 19 Apr 2004 07:58:02 GMT

I'd like to start on a script that checks files under the /tcb/files/auth directory for 'deactivated' accounts.

I'm having a difficult time trying to distinguish between a unlocked and locked accounts. What do I need to grep for?

Re: script to check user account status -- HP-UX 11 trusted sys

Robert-Jan Goossens — Mon, 19 Apr 2004 08:09:21 GMT

Hi,

How to report inactive (locked) user accounts on a trusted system

Document id: USECKBRC00008606

http://www5.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000066028349

Hope this helps,
Robert-Jan

Re: script to check user account status -- HP-UX 11 trusted sys

RAC_1 — Mon, 19 Apr 2004 08:28:10 GMT

It is just about checking the mlock status for user. The bits in mlock status will show why the account is locked if it is locked.

/usr/lbin/getprpw -m lockout
man getprpw for more details.

Anil

Re: script to check user account status -- HP-UX 11 trusted sys

Kristopher March — Mon, 19 Apr 2004 08:50:43 GMT

Thank you both. This should get me going in the right direction.

Re: script to check user account status -- HP-UX 11 trusted sys

Linda Baranauskas_1 — Wed, 02 Jun 2004 10:43:02 GMT

How can you tell from the following line if an account is actually active or locked?

u_lock@:chkent:

Linda