topic Re: Locked accounts in /etc/passwd in Operating System - HP-UX

Locked accounts in /etc/passwd

Joe Profaizer — Wed, 10 Jan 2007 18:14:21 GMT

Is there a way to grep the /etc/passwd file to find out if there are locked accounts? The only way I know of is to go through SAM one by one to see if accounts are locked out.

Any ideas on expediting this would be appreciated.

Thanks,

..Joe

Re: Locked accounts in /etc/passwd

Geoff Wild — Wed, 10 Jan 2007 18:22:14 GMT

/usr/lbin/getprpw userid
can tell you if user is locked.

Rgds...Geoff

Re: Locked accounts in /etc/passwd

Rick Garland — Wed, 10 Jan 2007 18:22:27 GMT

If the system is trusted, view this post. Talks about use of the 'getprpw' command to get the info you seek.

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1050217

Re: Locked accounts in /etc/passwd

Geoff Wild — Wed, 10 Jan 2007 18:27:26 GMT

Course - if it isn't trusted, the encrypted password will be an asterick: *

grep -e "*:" /etc/passwd

Rgds...Geoff

Re: Locked accounts in /etc/passwd

Sp4admin — Wed, 10 Jan 2007 18:54:25 GMT

Hi Joe,

You can check on accounts at the command line useing the getprpw command. when you do a getprpw and numbers come back that are 1 then the account is locked. if it comes back wirh all 0's then the account is not locked.

#getprpw -r -m lockout username

#modprpw -k username

sp,

Re: Locked accounts in /etc/passwd

A. Clay Stephenson — Wed, 10 Jan 2007 19:38:21 GMT

Actually to be precise, if the system is untrusted the locked accounts are those which do not have a 13 character value in the passwd hash field. By convention, it is a '*' which is an impossible hash but I have used other non-13 character strings to designate why an account is locked.

Re: Locked accounts in /etc/passwd

Raj D. — Wed, 10 Jan 2007 22:37:50 GMT

Joe,

# cd /usr/lbin/
# ./getprpw username
And check for the lockout value, 1 is locked.

you can release the locked account by :
# modprpw -k username

Remember this is for trusted systems. Non trusted systems you can use SAM and Reactivate the user.

cheers,
Raj.

Re: Locked accounts in /etc/passwd

Asif Sharif — Wed, 10 Jan 2007 23:45:58 GMT

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1062988&admit=-682735245+1168490602245+28353475