By default this is not enabled. You might want to check the audit daemon, the audit daemon
Can track those kinds of things.

If your company is SOX compliant it can very well be that you need this to be in place to be SOX compliant. You can check out the following links:


http://www.terminalcult.org/manpages...&Search=Search
http://www.terminalcult.org/manpages...&Search=Search
http://www.terminalcult.org/manpages...&Search=Search


Regards, Johan Louwers.

***Moderators note: Signature removed from post -- reborg.

Very true. But we dont this in place on the server now.

And we are trying to find this out for an existing user.
We tried checking the user home directory for the timestamps of .bash_profile etc. Not sure, if this is the only way available. Just trying to find out easy ways for doing the same.

Cheers, Murli.

just a thought. but i'm almost certain if you do a ls -ld on the home directory of the user that should bring you closer to the exact date it was created.

ls -ld /home/user'shomedirectory (check the 6th and 7th columns)

actually, this can be wrong since the 6th and 7th columns date gets updated each time the contents of the directory changes.

however, depending on the frequency of the user's usages you can do a ls -ltcr in the user's home directory and look at the date of oldest file in there.

Hi all,

Just a quick note. Remember it's possible to create a user account without a home directory so checking modification times of home directories wont always work.