Account inactive parameter

[YLTan]

I need to write a scripts to check for account ID that are in-active for more than 90 days. But where can I find the parameters that stores the period of in-active for an account.

I am using HP Trusted System on HPUX11.11

[Christian Gebhardt]

Hi

you can use last-command to find inactive users, but it's ver hard to script.

All information about accounts you can find in
/tcb/files/auth/...
e.g. for root
/tcb/files/auth/r/root
In this files there are several parameters such as u_suclog (last successful login), u_unsuclog (last unsuccessful login), u_numunsuclog (number of unsuccessful logins), ....
The values behind this parameters are in UNIX time.
To convert Unix-time to readable format you 'll find many postings in this forum.


Hope this helps

Chris

[Stefan Farrelly · Accepted solution]

/usr/lbin/getprpw -m slogint

shows the last successful login for this user, you can then simply use a script to check for month/days since last login.