find out all disabled hp-ux users in a trusted system

[vvsha]

Is there any way to find out all disabled users in a trusted system.
I am using HP-UX B.11.00.
Please help me on this.

[J. Bravo]

Hi:

SAM--> Accounts for users--> Users--> View--> Filter --> Activated-Matches-no

Regards;

J. Bravo.

[Aneesh Mohan · Accepted solution]

Hi Shabi,

/usr/lbin/getprpw loginname

if alock=YES then the account is disabled and alock=NO then the account is active


Aneesh

[whiteknight]

Execute the following command to identify the de-activated user accounts:

# /usr/lbin/getprpw -r -m lockout


Command Value ||Account Status
--------------------------------------
0001000 means Disabled because unsuccesful

0000010 means Administrative lockout

All Zeros means Active

WK

[Arturo Galbiati]

Hi,
If I well rememeber users having ! in the second filed in /etc/passwd should be disables.
HTH,
Art

[vvsha]

Hi Aneesh,

Thank you very much for your great help.

Please let me know how to disable an account in trusted system.

I can use " modprpw -k " command to enable userid.

[Aneesh Mohan]

Hi Shabi,

To disable/lock the account pls do

#passwd -l loginname

Aneesh

[lawrenzo]

try

# passwd -l

check the man page as not too sure about the command on a trusted system.

Chris.

[Bill Hassell]

As mentioned, use passwd -l to lockout a user.

> If I well rememeber users having ! in the second filed in /etc/passwd should be disables.

Actually, ANY character string less than 13 characters long will disable an account for an unTrusted system. HP-UX typically uses the * character (unTrusted). For Trusted systems, the lockout codes are kept in a secure directory called /tcb.

[vvsha]

Hi Aneesh,

In my trusted system,

exptm(password expiration time) and
lftm(password lifetime) both values set to -1 . it means what?