disable /enable users.

[chapaya_1]

Hi ,

1. How do i disable a user with command line ?
2. How do i verify it by command?
3. How do i enable it back ?

BYE

[Luk Vandenbussche]

lock
#passwd -l

unlock
#passwd

See also

http://forums1.itrc.hp.com/service/forums/parseCurl.do?CURL=%2Fcm%2FQuestionAnswer%2F1%2C%2C0x78ae50dde50cd71190050090279cd0f9%2C00.html&admit=-682735245+1139472327698+28353475

[Kasper Hedensted · Accepted solution]

Hi,

1:
/usr/lbin/modprpw -l -m alock=YES username

2:
/usr/lbin/getprpw -lrm lockout username

this command gives this output:
0000010 ( which means - admin lock )

3:
/usr/lbin/modprpw -lk username


for more info man modprpw and getprpw

Cheers,
Kasper

[Sivakumar TS]

Hi,

To disable a user

#passwd -l


Do,

#passwd

and assign a passwrod to enable it back

With Regards,

Siva.

[Arunvijai_4]

Hello,

1. How do i disable a user with command line ?

# passwd -l

2. How do i verify it by command?

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=726139

3. How do i enable it back ?

# passwd

-Arun

[Ajitkumar Rane]

Chapaya,

Disable/Lock a user account

# passwd -l loginid

To unlock/enable a user's account that has become disabled
#modprpw -k loginid


Rgds,

Ajit

[chapaya_1]

Hi All ,

My system is in trusted mode , is it make difference ?

BYE

[Arunvijai_4]

Yes,

In case of trusted mode, you can follow these steps,

# /usr/lbin/modprpw -k uname

For other queries, use this thread,

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=955231

-Arun

[Muthukumar_5]

Non-trusted mode:

1) passwd -l
2) Login with that user from terminal or passwd -s
3) passwd -d

Trusted Mode:

1) modprpw alock=YES
2) getprpw -a
3) modprpw -k

--
Muthu

[Muthukumar_5]

Use the attached document for trusted systems.

--
Muthu

[Muthukumar_5]

Use the attached document for trusted systems.

Thanks to Bharat ;)

--
Muthu

[chapaya_1]

Thanks all !!

Kasper ,

how do i get lockout parameter from getprpw ??

[Steven E. Protter]

Shalom,

man getprpw

This one works with trusted systems. If your system is not trusted, it may not be useful for you.

SEP

[Arunvijai_4]

Hello,

# /usr/lbin/getprpw -lrm lockout username

Take a look at # man getprpw.


lockout returns the reason for a lockout in a "bit" valued
string, where 0 = condition not present, 1 is
present. The position, left to right represents:

1 past password lifetime
2 past last login time (inactive account)
3 past absolute account lifetime
4 exceeded unsuccessful login attempts
5 password required and a null password
6 admin lock
7 password is a *

-Arun

P.S Remember to assign points.

[Cem Tugrul]

How about the script below?

echo "THE USERS BELOW LOCKED:\r"
for USER in $(listusers | awk '{print $1}'|egrep -v "sshd|smbnull|tools|tbase")
do
lock_pos=$(/usr/lbin/getprpw -r -m lockout $USER)
user_name=$(grep $USER /etc/passwd|awk -F: '{print $5}')
if [ $lock_pos != "0000000" ]
then
echo "$USER $user_name $lock_pos"
fi
done
#end script

#man getprpw

lockout returns the reason for a lockout in a "bit" valued
string, where 0 = condition not present, 1 is
present. The position, left to right represents:

1 past password lifetime
2 past last login time (inactive account)
3 past absolute account lifetime
4 exceeded unsuccessful login attempts
5 password required and a null password
6 admin lock
7 password is a *

Good Luck,

[Cem Tugrul]

if you wish i can send you a script for to
"unlock" users who are locked!!!
:-))
Good Luck,