User logon

[Fuad_1]

How can I find out all users who did not login for certain time.

[Deepak Extross]

You can use the "last" command.
Probably loop through all valid users ( see "man users"). Get the most recent login for each user and see if it is later than your time interval.

[harry d brown jr]

Do you have a "trusted" system? If you do you could have passwd aging on and when they call to have their account reactivated then you know.

You could use "last".

Or you could list the .profiles in their home directories to see if it's been opened.

I'd suggest looking at this thread http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x026250011d20d6118ff40090279cd0f9,00.html


live free or die
harry

[Bill McNAMARA_1 · Accepted solution]

using finger:
-------------
for i in $(cat /etc/passwd | cut -d: -f1)
do
finger $i| grep Never| xargs echo $i | grep Never
done

or using last
-------------

OPTIONS=""
OPTIONS=$#

echo "" > /tmp/there.loggedin$$
cat /etc/passwd | cut -d: -f 1 | sort > /tmp/passwd.users$$

for i in $(last $OPTIONS | awk {'print $1'} | sort | uniq)
do
grep $i /etc/passwd |cut -d: -f 1 | sort>> /tmp/there.loggedin$$
done

echo "Did not login:"
echo "--------------"
sdiff /tmp/there.loggedin$$ /tmp/passwd.users$$ | grep ">" | tr -s " " ""

rm /tmp/there.loggedin$$
rm /tmp/passwd.users$$

[Bill McNAMARA_1]

change
for i in $(last $OPTIONS
to
for i in $(last