User Accounts

[pgorn]

I am looking to collect the user account info. Such as the aging polices and the Security Polices that are set on my server because security wants to make sure we are using the correct standards. Does anyone know how I can do this or is there a script out there?
thanks

[A. Clay Stephenson · Accepted solution]

logins -x

then
cat /etc/default/security

[pgorn]

Clay,
after PS 112305
what does that mean?

[Patrick Wallek]

Have a look at the 'logins' man page.

# man logins
******
Excerpt for '-x' option:

-x Display extended information about selected users. This extended information includes home directory, login shell and password aging data, each on its own line. Password information consists of password status (PS for valid password, LK for locked and NP for no password) and, if a password is present, date of last change, required number of days between changes, and number of days allowed between changes. In the case of non-trusted systems, the date of last change will be the latest Thursday since the change.
******

So, that number is the date the password was last changed.

[A. Clay Stephenson]

>>> Clay,
after PS 112305
what does that mean?

It means at least two things:
1) You are too lazy to do a "man logins".
2) It means that the password is valid (PS) and that the date of the latest password change was November 23, 2005.

Now do a "man logins" and pay attention to the section that describes the -x option.

[pgorn]

Thanks,
I did the man page after I posted thanks