topic Re: which users are activated in Operating System - HP-UX

which users are activated

Tuan Nguyen — Tue, 16 Oct 2007 11:02:59 GMT

Hello, admins

System: 9000 server
OS: hpux 11.0 and 11.11
From command line, how do I find out which user is activated and which one is not?

Thank you in advance for your help.

Tuan

Re: which users are activated

A. Clay Stephenson — Tue, 16 Oct 2007 11:08:46 GMT

logins -x. Locked accounts will display "LK". Man logins for details.

Re: which users are activated

Steven E. Protter — Tue, 16 Oct 2007 11:37:20 GMT

Shalom Tuan,

passwd -sa

May be useful.

SEP

Re: which users are activated

Tuan Nguyen — Tue, 16 Oct 2007 11:41:28 GMT

Clay,

Thanks for your prompt response. I look into SAM and see many accounts which are de-activated. However, logins -x shows PS on a de-activated accounts.

Any suggestion?

I appreciate your help.

Tuan

Re: which users are activated

David Bellamy — Tue, 16 Oct 2007 11:44:06 GMT

passwd -sa is the right command to run it will show you all the active and deactive accounts.

Re: which users are activated

Tuan Nguyen — Tue, 16 Oct 2007 11:45:13 GMT

Steven,

Thank you for your response. passwd -sa also shows PS on deactivated accounts.

Tuan

Re: which users are activated

A. Clay Stephenson — Tue, 16 Oct 2007 11:53:32 GMT

There are a number of reasons that an account is no longer active but it may not be locked either. On a trusted system (which you appear to be) do this:

#!/usr/bin/sh

listusers | awk '{print $1}' | while read U
do
LK=$(/usr/lbin/getprpw -r -m lockout ${U})
echo "${U}\t${LK}"
done

If the lockout field consists of all zero's then the account is active but if there is a '1' in any position; the account is locked/expired/... . The position of each '1' is significant as it relates to the specific reason for an account lock. Man getprpw for details and pay attention to the section that describes "lockout".

NOTE: Only your 11.11 box will have a man page for getprpw.

Re: which users are activated

Tuan Nguyen — Tue, 16 Oct 2007 12:02:14 GMT

Clay,

You are super admin. Thank you very much for your help.

Again, I would like to thank everyone for your help. Points will be assigned shortly.

Tuan

Re: which users are activated

Tim Nelson — Tue, 16 Oct 2007 14:17:26 GMT

I use a quick script that uses the getprpw command to derive the status of a user id.

cat list of users into loop that executes the following for each.
getprpw -m lockout $user
then use the lockout code to determine.

i.e.

/usr/lbin/getprpw -m lockout $list|awk -F= '$2 != "0000000" {print "DEACTIVATED"}'

Re: which users are activated

Tuan Nguyen — Tue, 16 Oct 2007 15:31:29 GMT

Tim,

Thank you for your help.

Thank you, everyone.

Tuan