Password disable/ expire

[Khashru]

I am usinh HP-UX 11i trusted system. Sometimes user called to re enable their password. How can i find whether a password is expired or jut simply disabled.

[Prashant Zanwar_4]

/usr/lbin/modprpw -l -k userid

/usr/lbin/modprpw -l -v userid

is something needed to reinvoke them.

And

/usr/lbin/getprpw userid can tell you if user is locked.

Prashant

[Khashru]

Gives a huge output. which parameter should i check?

[Rajeev Shukla · Accepted solution]

Run
/usr/lbin/getprpw -m lockout
this will return you locokout value with 7 digits and each has a meaning.
If its all "0" then it means that account is enabled and if any field is "1" then it means the account is locked with a reason..
below is the meaning if you find one in any place..
1st - past password lifetime
2nd - past last login time (inactive account)
3rd - past absolute account lifetime
4th - exceeded unsuccessful login attempts
5th - password required and a null password
6th - admin lock
7th - password is a *

[Bill Hassell]

There are several commands that can provide part of the information. You usually need to know things like what caused the account to be disabled (expiration -- either due to non-usage at all or normal expiration), whether the user is still logged on, when they last failed to login and when they were last logged on successfully. The attached script will decode all this in a useful format. Store this script as "userinfo", make it executable and then type: userinfo

[Prashant Zanwar_4]

I liked information provided by Rajiv... and also from bill too

logins -x -l userid .. also shall help to good extent

Regards
Prashant

[Sp4admin]

Hello,

You can check the user status.

Check if locked:
/usr/lbin/getprpw -r -m lockout user_id
000010

Unlock account:
/usr/lbin/modprpw -k user_id



sp,

[Sp4admin]

Hi,

you can also check some stuff using the following. There are some setting you can check.

This will show the user setting.

getprpw user_login_nameâ .

This will change the password changing.
modprpw â m mintm=1 user_login_name

if you want to see the value for the â mintmâ field before changing it run â getprpw user_login_nameâ . this for password changing.


sp,