how to know what time one user was created?

UNIX for Beginners Q & A UNIX for Dummies Questions & Answers
1

I am using RHEL.
I wan to know the creation time of one user?

which command?

2

You can see the date of dir ".."under the user who you want to know the creation time.
It is same as the user's creation time.

3

Unix systems do not keep the user creation timestamp logs, nor linux keeps the log.
However if the user has not logged in yet ( can be check with finger) you can look at the ~user/.bash_profile or ~user/.bash_history files timestamp to figure it out the time the user was created.
Also if no other user created after creation of that user, you can look at the timestamp of the password file (ls -l /etc/passwd) it will show the timestamp when the last user was created.

4

thanks !

5

If you have auditd enabled, the following command will give you all the information could you possibly want about past user account creations:

ausearch -c useradd