Dormant user accounts

[drmanager]

Running AIX 5.1 on 6C3 and need to find and identify all dormant user accounts (logins). Does anyone know of a way to use usrck, pwdck, or another utility to accomplish this?

 

[RodKnowlton]

Quick and dirty, printing both aged and never used:

#!/usr/bin/perl 

BEGIN{
     $dormant_days=90;
     $threshold=time - (24*3600*$dormant_days)
     }

open CMD, "lsuser -a time_last_login ALL|";
while ( <CMD> )
{
print if /time_last_login=(\d+)/ && ( $1 < $threshold);
print unless /time_last_login/;
}

Don't do any automated locking based on this without adding exceptions for machine accounts that never login like lpd and nobody.

Rod Knowlton
IBM Certified Advanced Technical Expert pSeries and AIX 5L
CompTIA Linux+
CompTIA Security+