topic Re: identifying locked users, locking & unlocking users in Operating System - HP-UX

identifying locked users, locking & unlocking users

Ravinder Singh Gill — Tue, 24 Jul 2007 09:35:03 GMT

Hi,

How do I check if a particular user's account has been locked?

Also how do I lock and unlock accounts?

Re: identifying locked users, locking & unlocking users

Ivan Krastev — Tue, 24 Jul 2007 09:40:31 GMT

See KB doc id USECKBRC00008606 :
How to report inactive (locked) user accounts on a trusted system

There is also a script attached to perform task.

regards,
ivan

Re: identifying locked users, locking & unlocking users

A. Clay Stephenson — Tue, 24 Jul 2007 09:45:52 GMT

I assume for the moment that this is a trusted system. You should have made that distinction.

Plan A.
logins | awk '{print $1}' | while read U
do
/usr/lbin/getprpw -m lockout ${U}
done

Locked users will have a '1' in at least one location in the lockout string.

Plan B.
logins -x

Locled accounts will display "LK".

To unlock a trusted account, /usr/lbin/modprpw -k user.

To unlock a standard system, replace the bogus password hash (typically '*') with a valid passwd hash. (i.e. run the passwd command).

Man logins, getprpw, modprpw for details.

Re: identifying locked users, locking & unlocking users

Robert-Jan Goossens — Tue, 24 Jul 2007 09:47:10 GMT

Hi,

/usr/lbin/modprpw -e useraccount

To lock an account.

/usr/lbin/modprpw -k useraccount

to unlock.

Link to above doc.
Europe
http://www8.itrc.hp.com/service/cki/docDisplay.do?docLocale=en&docId=emr_na-c01031510-2
US
http://www1.itrc.hp.com/service/cki/docDisplay.do?docLocale=en&docId=emr_na-c01031510-2

Regards,
Robert-Jan

Re: identifying locked users, locking & unlocking users

Uday_S_Ankolekar — Tue, 24 Jul 2007 09:53:11 GMT

If your server is not trusted then best bet would be logins command.

modprpw and getprpw is available only for trusted server.

logins -x would report details of all users, and you should be looking for "LK"

-USA..