security - script to check for accounts for users that have not logged in

[Ratzie]

Instead of re creating the wheel...
Has anyone create a script that checks to see of a user has not logged in in 90 days...

[Robert Walker_8]

Gday,

I think if you just used lastlog you would have pretty much a good start.

Output of lastlog for one of our systems looks like:

Username Port From Latest
root :0 Tue Sep 26 13:34:15 +1000 2006
bin **Never logged in**
daemon **Never logged in**
adm **Never logged in**
lp **Never logged in**
sync **Never logged in**
shutdown **Never logged in**
halt **Never logged in**
mail **Never logged in**
news **Never logged in**
uucp **Never logged in**
operator **Never logged in**
games **Never logged in**
gopher **Never logged in**
ftp **Never logged in**
nobody **Never logged in**
dbus **Never logged in**
vcsa **Never logged in**
rpm **Never logged in**
haldaemon **Never logged in**
netdump **Never logged in**
nscd **Never logged in**
sshd **Never logged in**
rpc **Never logged in**
mailnull **Never logged in**
smmsp **Never logged in**
rpcuser **Never logged in**
pcap **Never logged in**
apache **Never logged in**
xfs **Never logged in**
ntp **Never logged in**
gdm **Never logged in**
pegasus **Never logged in**
fred pts/2 192.168.1.250 Wed Sep 27 01:24:18 +1000 2006
barney pts/3 192.168.1.195 Wed Sep 27 08:35:33 +1000 2006

Robert.

[Alexander Chuzhoy · Accepted solution]

The attached file should work. Make sure it has executable permissions.

[Ratzie]

awesome works for me