account locked - query

[Jagadesh_2]

Hi All,
lastb command gives the list of unsucessful login names.
Which command / file will give the list of locked account names. When the user tries to login through a locked account it will throw an message "Account locked - see system administrator" where this information is stored and how to view this.

Many thanks
S.Jagadesh

[Arunvijai_4]

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=650641

-Arun

[Steven E. Protter]

Shalom Jagdesh

A combination if passwd -sa and lastb should give you record of who locked their account.

lastb lists bad logins and if the user is in there enough times, the user is certainly locked.

SEP

[Sivakumar TS]

You can check the /etc/passwd file for this.
All locked users will have LK in their passwd field.

one simple way could be

#cat /etc/passwd | grep LK

With Regards,

Siva.

[Jeff Schussele]

Hi,

No *one* file will give you that.
If trusted the following command run against *each* account will give you the lockout status
/usr/lbin/getprpw -m lockout user_name
If the result is non-zero then they're OK - if not, they're locked out.
If not trusted then if "*" is in the second field of the /etc/passwd file for a user_name - then they're locked out.

HTH,
Jeff

[Cem Tugrul · Accepted solution]

How about the script for trusted systems?

echo "USERS LOCKED BELOW:\r"
for USER in $(listusers | awk '{print $1}'|egrep -v "sshd|smbnull|tools|tbase")
do
lock_pos=$(/usr/lbin/getprpw -r -m lockout $USER)
user_name=$(grep $USER /etc/passwd|awk -F: '{print $5}')
if [ $lock_pos != "0000000" ]
then
echo "$USER $user_name $lock_pos"
fi
done

Hope this helps!!!

Good Luck,