topic Re: Check user password expiry information ! in Operating System - Linux

Check user password expiry information !

Chris Fung — Sun, 18 Jan 2004 22:03:16 GMT

Hi all,

I would like to create a script to collect all the user accounts with their password expiry date.

This script will be executed on daily basis and generate a report for administrator to inform related account owners to login and change their password accordingly.

From my understanding. The expiry date in Unix is in terms of seconds and has a baseline set to 1-Jan-1970. We need to take care for the maximum password life password policy as well.

Any idea to creat the script ? Appreciated it if you could give me some samples.

Best Regards,

Chris,

Re: Check user password expiry information !

Steven E. Protter — Sun, 18 Jan 2004 22:53:26 GMT

-S This will output a short information about the status of the
password for a given account. Available to root user only.

From the man page

passwd -S username

You may want to use it in combination with other options.

SEP

Re: Check user password expiry information !

Jerome Henry — Mon, 19 Jan 2004 03:02:01 GMT

As Stevens says, passwd -S gives you the information you need for each user. The first part indicates if the user account is locked (L), has no password (NP), or has a usable password (P). The second part gives the date of the last password change. The next four parts are the minimum age, maximum age, warning period, and inactivity period for the password.

Maybe could you loop a script searching for each number above 500 (if your user accounting starts from 500), and just calculating max age - last change and piping it to a .txt if it's less than the value you want...

Would it suit your needs ?

J

Re: Check user password expiry information !

Chris Fung — Tue, 20 Jan 2004 21:06:35 GMT

Hi there,

Thanks for the inputs !!

Cheers,

Chris,