topic Re: disable /enable users. in Operating System - HP-UX

disable /enable users.

chapaya_1 — Thu, 09 Feb 2006 02:55:59 GMT

Hi ,

1. How do i disable a user with command line ?
2. How do i verify it by command?
3. How do i enable it back ?

BYE

Re: disable /enable users.

Luk Vandenbussche — Thu, 09 Feb 2006 03:05:52 GMT

lock
#passwd -l

unlock
#passwd

See also

http://forums1.itrc.hp.com/service/forums/parseCurl.do?CURL=%2Fcm%2FQuestionAnswer%2F1%2C%2C0x78ae50dde50cd71190050090279cd0f9%2C00.html&admit=-682735245+1139472327698+28353475

Re: disable /enable users.

Kasper Hedensted — Thu, 09 Feb 2006 03:06:21 GMT

Hi,

1:
/usr/lbin/modprpw -l -m alock=YES username

2:
/usr/lbin/getprpw -lrm lockout username

this command gives this output:
0000010 ( which means - admin lock )

3:
/usr/lbin/modprpw -lk username

for more info man modprpw and getprpw

Cheers,
Kasper

Re: disable /enable users.

Sivakumar TS — Thu, 09 Feb 2006 03:07:52 GMT

Hi,

To disable a user

#passwd -l

Do,

#passwd

and assign a passwrod to enable it back

With Regards,

Siva.

Re: disable /enable users.

Arunvijai_4 — Thu, 09 Feb 2006 03:29:43 GMT

Hello,

1. How do i disable a user with command line ?

# passwd -l

2. How do i verify it by command?

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=726139

3. How do i enable it back ?

# passwd

-Arun

Re: disable /enable users.

Ajitkumar Rane — Thu, 09 Feb 2006 04:04:37 GMT

Chapaya,

Disable/Lock a user account

# passwd -l loginid

To unlock/enable a user's account that has become disabled
#modprpw -k loginid

Rgds,

Ajit

Re: disable /enable users.

chapaya_1 — Thu, 09 Feb 2006 04:18:27 GMT

Hi All ,

My system is in trusted mode , is it make difference ?

BYE

Re: disable /enable users.

Arunvijai_4 — Thu, 09 Feb 2006 04:35:03 GMT

Yes,

In case of trusted mode, you can follow these steps,

# /usr/lbin/modprpw -k uname

For other queries, use this thread,

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=955231

-Arun

Re: disable /enable users.

Muthukumar_5 — Thu, 09 Feb 2006 04:59:36 GMT

Non-trusted mode:

1) passwd -l
2) Login with that user from terminal or passwd -s
3) passwd -d

Trusted Mode:

1) modprpw alock=YES
2) getprpw -a
3) modprpw -k

--
Muthu

Re: disable /enable users.

Muthukumar_5 — Thu, 09 Feb 2006 05:01:45 GMT

Use the attached document for trusted systems.

--
Muthu

Re: disable /enable users.

Muthukumar_5 — Thu, 09 Feb 2006 05:03:04 GMT

Use the attached document for trusted systems.

Thanks to Bharat ;)

--
Muthu

Re: disable /enable users.

chapaya_1 — Thu, 09 Feb 2006 05:53:06 GMT

Thanks all !!

Kasper ,

how do i get lockout parameter from getprpw ??

Re: disable /enable users.

Steven E. Protter — Thu, 09 Feb 2006 05:59:12 GMT

Shalom,

man getprpw

This one works with trusted systems. If your system is not trusted, it may not be useful for you.

SEP

Re: disable /enable users.

Arunvijai_4 — Thu, 09 Feb 2006 05:59:15 GMT

Hello,

# /usr/lbin/getprpw -lrm lockout username

Take a look at # man getprpw.

lockout returns the reason for a lockout in a "bit" valued
string, where 0 = condition not present, 1 is
present. The position, left to right represents:

1 past password lifetime
2 past last login time (inactive account)
3 past absolute account lifetime
4 exceeded unsuccessful login attempts
5 password required and a null password
6 admin lock
7 password is a *

-Arun

P.S Remember to assign points.

Re: disable /enable users.

Cem Tugrul — Thu, 09 Feb 2006 09:57:01 GMT

How about the script below?

echo "THE USERS BELOW LOCKED:\r"
for USER in $(listusers | awk '{print $1}'|egrep -v "sshd|smbnull|tools|tbase")
do
lock_pos=$(/usr/lbin/getprpw -r -m lockout $USER)
user_name=$(grep $USER /etc/passwd|awk -F: '{print $5}')
if [ $lock_pos != "0000000" ]
then
echo "$USER $user_name $lock_pos"
fi
done
#end script

#man getprpw

lockout returns the reason for a lockout in a "bit" valued
string, where 0 = condition not present, 1 is
present. The position, left to right represents:

1 past password lifetime
2 past last login time (inactive account)
3 past absolute account lifetime
4 exceeded unsuccessful login attempts
5 password required and a null password
6 admin lock
7 password is a *

Good Luck,

Re: disable /enable users.

Cem Tugrul — Thu, 09 Feb 2006 09:59:09 GMT

if you wish i can send you a script for to
"unlock" users who are locked!!!
:-))
Good Luck,