HP/UX 11.11 Restricted access for maintenance?

[rmueller58]

We are migrating database from Raid storage to SAN, we want to make sure only key users have access to the system..

Is there a good way in the /etc/profile to keep all but users root, user1, user2 and informix from getting access?

[Steven E. Protter · Accepted solution]

Shalom,

passwd -l

For every user that you want to keep off the system.

cat /etc/passwd | awk '{ print $1 }' > /tmp/list

edit the list

while read -r un
do
passwd -l $un
done < /tmp/list

SEP

[Chandrahasa s]

Hi,

You can lock other user duiring activity using command

passwd -l username

verify is it done..

/usr/lbin/getprpw username

you should see lockout=0000010

Chandra

[rmueller58]

I am on a trusted system.

should i use the modprpw or passwd?

I want several accounts to remain active, but to lockout during maintenance all others, then after we get done to allow all users again.

[rmueller58]

passwd -l works now I have to get a script written to lock and then unlock.

I am going to create a list per SRP's rec, to

for UU in `cat lockoutuser`
do
passwd -l $UU
done


for unlocking

Roll these two commands in place of passwd:
/usr/lbin/modprpw -l -m alock=NO $UU
/usr/lbin/modprpw -k $UU


Sound right?

[James R. Ferguson]

Hi:

Instead of:

for UU in `cat lockoutuser`
do
passwd -l $UU
done

...eliminate the extra process you spawn (the 'cat') and let the shell do this:

while read UU
do
passwd -l ${UU}
done < lockoutuser

...

Regards!

...JRF...

[rmueller58]

Thanks JRF.

[rmueller58]

JRF or Steven,

would this work to unlock post maintenance?

while read UU
do
/usr/lbin/modprpw -l -m alock=NO $UU
/usr/lbin/modprpw -k $UU
done < lockuser.txt

[Chandrahasa s]

Hi,

you can just run

/usr/lbin/modprpw -k $userid

Chandra

[rmueller58]

Chandra, so based on my lock file I would just do this correct?


while read UU
do
/usr/lbin/modprpw -k $UU
done < lockuser.txt