topic Trusted in Operating System - HP-UX

Trusted

Flaimisson — Mon, 12 Apr 2004 20:52:17 GMT

Hi,
I have HpUx11.00 server.
After to convert trusted system, is there reports to see date password expiration ?

Re: Trusted

Michael Tully — Mon, 12 Apr 2004 21:16:30 GMT

There is a command called 'getprpw'. All you would need to do is pump the user id's to get the information required.

/usr/lbin/getprpw -m spwchg username
spwchg=Tue Mar 2 15:38:45 2004

The man pages gives some examples, but only on a 11i system. You can get a copy from here, it you don't have it.
http://docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/B2355-60103/B2355-60103_top.html&con=/hpux/onlinedocs/B2355-60103/00/06/649-con.html&toc=/hpux/onlinedocs/B2355-60103/00/06/649-toc.html&searchterms=getprpw&queryid=20040412-201546

Re: Trusted

Michael Tully — Mon, 12 Apr 2004 21:20:58 GMT

Here's a simple way to pump in the information.

# for i in `cut -d : -f 1 /etc/passwd`
> do
> echo $i
> /usr/lbin/getprpw -m spwchg $i
> done

Re: Trusted

Jim Mallett — Mon, 12 Apr 2004 21:35:10 GMT

Just to add, as Michael has already answered your immediate question. If this is your first time with Trusted Systems, there are a couple of commands that I use regularly.
getprpw as mentioned, and modprpw.

Just modify the getprpw line in Mikes script to the following, and you will list anybody that has been locked out.
/usr/lbin/getprpw -m lockout $i | grep -v 0000000

If you need to unlock an account:
modprpw -k

hth, Jim