Account Lockout

[rmueller58]

I need to perform maintenance on a couple databases and need to LOCKOUT accounts from accessing my system for a period of time until I get my db maintenance routines done.

I have this script to force password change..

while read UUNAME X
do
/usr/lbin/modprpw -e -m exptm=120 ${UUNAME}
done < /tmp/USERLIST.txt

I was curious if I could also or instead of the -m exptm=120 change it to alock=YES?

Any one had any experience it using modprpw for this again appreciate insight.. Just want to keep them out and NOT touching things, and only those people in USERLIST.txt

See read stdin above.

[James R. Ferguson · Accepted solution]

Hi:

I'd use the '-m alock=YES' method. Using the '-m exptm=120' argument only sets the password expiration interval to 120-days. I base these remarks on reading the manpages, as I don't run "to-be-obsolete-after-11.31" Trusted systems.

Regards!

...JRF...

[rmueller58]

Thanks again James..

[rmueller58]

Thanks