List all inactive users who has not logged on since last 90 days

UNIX Solaris
1

I need actuall script which List all inactive users who has not logged on since last 90 days

Thanks in advance.
Di!

2

You can get all that info on /etc/shadow, can't give you what I have, I didn't write it.

3

The passwd command has some useful options. See its manual page.

4

I am not getting you. /etc/shadow has password information.I need to generate list of users who has not logged on since last 90 days.

5

You have to use the "last" command and use that to manipulate.
Do you need further information?

6

I am actualll new to this system. Can you give me script?

7

I do not have that in hand, if you give me some time, I will prepare one.

8

Okay. Thanks a lot!

9

last will only go back so far, typically beginning of the current month. passwd -S -a shows you status for each account, including ones which never logged in. Search this site for usage examples.

10

For your information on basic user administration:
#logins -s : Lists system accounts
#logins -u . Lists user accounts
#logings -d : Lists duplicate accounts

#usermod -f 15 username : user's account expires if the user has not logged in for 15 days or longer.
#usermod -e 12/31/2001 username : automatically expire an account on a particular date
#usermod -e " " username : reactivate an account with a set expiration date.

#passwd -l : locks an account.
#passwd -e username : cgange the shell, which prompts you for a new shell program.
#usermod -s /usr/bin/false username : change a user's shell

/etc/shells file : Lists of valid login shells that are used by the passwd -e command.

11

Do you have actuall script?

12

As I've mentioned to you, I have to prepare one. I don't have a working script with me now.

13

Okay. Just send me whenever you make it.

Thanks!

14

And if you want a really "quick and dirty" for future use, you may set the password expiry days in the /etc/shadow file. On the 91th day, you can find out by skeeming through the shadow file and see those a/cs which are locked and you'll have the answer too.

15

Those tips were pretty useful...:slight_smile: Thanks guys...

16

Sorry bro, Im finding it tedious manipulating 'date' command with 'last' command.. Here's a very simple one, as I've other urgent tasks at hand.:mad: I don't have a unix system now to test this script.Pls execute and let me know.:o

!#/bin/ksh
for user in ` sed 's/:.*$//' /etc/passwd ` ; do
finger ${user} >> /tmp/logins
done
cat /tmp/logins|grep -v "bin|sys|adm|lp|smtp|daemon|uucp|listen|nobody|noacces|nobody4" >> /tmp/login-info
rm /tmp/logins

then have a look at the output to see which user has not logged in for some time.

from here onwards, you might want to see sorting the date column or grepping for a value.:wink:

17

In some environments finger won't give you the last login correctly.
Depending on how your users are set up you might look at the access times of files like .bash_history .profile .bashrc in their home directories.
It's not perfect but it may help and using find makes it easy.

18

Yes I agree . By cd-ing to the users' home dir and perform ls -rt, you will see the last modified date of the last file. Can find out from there too.