Stale Accounts on HP-UX Systems

[whiteSox]

How would you finds accounts that has not been used in 3 to 6 months .Is there a way to use sam and get that report.
Thanks for all your help.

[IT_2007]

use last command to read from /var/adm/wtmp assuming it is having a valid data to see users logged from when and where?

use lastb command to check unsuccessful logins which reads from /var/adm/btmp.

[Patrick Wallek]

If your system is trusted you can use 'getprpw' to get the last successful login time for the users.

# /usr/lbin/getprpw -m slogint

# /usr/lbin/getprpw -m slogint root
slogint=Thu Aug 10 11:35:15 2006

From here you should be able to script something to do what you require.

[Tim Nelson]

I use a script that I can supply options to like "expired" or "never".

It basically uses the getprpw command to get whatever account information is needed.

getprpw is the most usefull way to go.

The list of -m options are in the man pages.

Have Fun.