script to check user account status -- HP-UX 11 trusted sys

[Kristopher March]

I'd like to start on a script that checks files under the /tcb/files/auth directory for 'deactivated' accounts.

I'm having a difficult time trying to distinguish between a unlocked and locked accounts. What do I need to grep for?

[Robert-Jan Goossens]

Hi,

How to report inactive (locked) user accounts on a trusted system

Document id: USECKBRC00008606

http://www5.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000066028349

Hope this helps,
Robert-Jan

[RAC_1]

It is just about checking the mlock status for user. The bits in mlock status will show why the account is locked if it is locked.

/usr/lbin/getprpw -m lockout
man getprpw for more details.

Anil

[Kristopher March]

Thank you both. This should get me going in the right direction.

[Linda Baranauskas_1]

How can you tell from the following line if an account is actually active or locked?

u_lock@:chkent:

Linda