Gathering info on password aging / last time changed?

[JDR45]

I have several HP-UX 11.0 and 11.11 machines.  They are untrusted systems so I can't use that wonderful tool known as getprpw.  :)

So far the best command I have found for trying to gather this password info is

#passwd -sa | more

But I'm not quite sure how to read the output of that command.

Here's a sample-

root PS

daemon LK

bin LK

sys LK

adm LK

uucp LK

lp LK

DLR001 PS 06/26/14 0 84

DLR002 PS 07/17/14 0 84

DLR003 PS 09/18/14 0 84

DLR015 PS 05/24/12 0 84

DLR023 LK 06/21/07 0 84

DLR073 LK 06/21/07 0 84

I read the man page for passwd but didn't find many clues to what PS and LK stand for.  Is the date listed there the last time the password was changed?

What does that zero indicate before the 84? 

84 days = 12 weeks so I think that is how long the passwords last before they have to be changed. 

Thanks for any help!

[Dennis Handly · Accepted solution]

>I read the man page for passwd but didn't find many clues to what PS and LK stand for.

It's quite clear, at least in the 11.31 version:

   The format of the display will be:
   name status mm/dd/yy min max warn
   where status means: PS =passworded; LK =locked; and NP =no password.

>Is the date listed there the last time the password was changed?

Most likely, see passwd(4).

Have you looked at "logins -x"?

[JDR45]

Thanks for the info on PS, LK, and NP.

And the info listed with logins -x looks like it has exactly what I am after.  logins -x  plus passwd -sa will be very helpful.

Thanks much!

[Dennis Handly]

>Thanks much!

If you're happy with your answers, please assign kudos by clicking the thumbs up.

[JDR45]

I have been trying but get nowhere when I click the "kudos" button.  Will try from a different browser.

[Dennis Handly]

>have been trying but get nowhere when I click the "kudos" button.

Are you doing it on my posts?  You can't do it on your posts.