Determine the last password changed for a user on non-trusted systems

[Amitav]

Hi Gurus,
I need to know how can i determine the last password been changed for a user on hp-ux non trusted system. Though i've used the following commands, but didn't get the desired result:

logins -ax -l root
root 0 sys 3
/ts/root
/sbin/sh
PS 000000 -1 -1 -1
-1 000000


passwd -s
root PS

N.B.: Here i need to know the last password been changed for ROOT, though the above commands shud show me the date when it was changed, but nothing is shown. Kindly help me out on this case ASAP...!!

Cheers,
Amitav

[James R. Ferguson]

Hi:

A bit more information would be useful. What operating system version are you running? Is your '/etc/passwd' file a legacy one or is it a shadow implementation? What does the 'root' line in '/etc/passwd' look like?

Regards!

...JRF...

[Amitav]

Hi James,
The OS version is 11.11. No we do not have the /etc/shadow implementation. Below the few lines from /etc/passwd:

root:lxrrf6so5QX2o:0:3::/ts/root:/sbin/sh
daemon:*:1:5::/:/sbin/sh
bin:*:2:2::/usr/bin:/sbin/sh
sys:*:3:3::/:

[Johnson Punniyalingam]

# passwd -sa
to show info for all users. It will show the date the passwd was last changed. 'man passwd' for more info

[Bill Hassell]

You have a standard password so nothing is logged when the password is changed. That's why you see nothing with the passwd -s command. You need either Trusted, enhanced security or shadow password (depending on the version of HP-UX you are running).

[Dennis Handly]

>root:lxrrf6so5QX2o:0:3::/ts/root:/sbin/sh

You don't have password aging so you can't tell when it was changed.

>Bill: You have a standard password so nothing is logged when the password is changed.

If you have password aging with standard password, you can tell to the Wednesday when it was reset.