C2 or enhanced security Post: 33760

Sponsored Content

Top Forums UNIX for Advanced & Expert Users C2 or enhanced security Post 33760 by RTM on Friday 17th of January 2003 04:27:39 PM

01-17-2003

Registered User

This will help you start -

#!/u/bin/perl
#
# checkdate - a script to check a date (how long ago)
#
# Created 05/07/02 HOG
# ==========================================================================
# Set up variables
$getepoch= time () /60 /60 /24 ;
($nowepoch, $junk) = split (/\./, $getepoch, 2);
$arguement = $ARGV[0];
$diff=$nowepoch - $arguement;
print "Password reset $diff days ago - $nowepoch - $arguement\n";
# -------------------------------------------------------------------------

It gets the time now since epoch and takes off the amount from the third field from /etc/shadow - so if my user daniel last changed their password 12058 - the script converts it to how many days ago. You would have to change it to grab the correct field you are looking for (and add in to look into a file )

Example from /etc/shadow (modified username and encrypted password ;-):

daniel:xxxx:12058::35:14:::

# ./checkdate.pl 12058
Password reset 11 days ago - 12069 - 12058

The 12069 is today. 12058 was 11 days ago. I'm looking for folks who haven't changed their password in 60+ days but never automated it into a report - you could change this to do that but would have to be able to look into your file that contains the info and then put out a report of anyone 180+ days ago (approximatly 6 months).

RTM

View Public Profile for RTM

Find all posts by RTM

7 More Discussions You Might Find Interesting

1. Solaris

Enhanced Password Authentication

Hello; I am moving a customer from Solaris 2.6 to Solaris 2.8. The customer has requested the following two requirements also be implemented: 1. Lock a user account out for X number of days after 3 unsuccessful login attempts. 2. No reuse of the last 5-10 passwords. Also referred to...

2. UNIX for Advanced & Expert Users

Are there many UNIX server security enhanced products?

for sco, hp, or AIX...... anyway, how can I secure the UNIX system. I knew that CA has it's products for securing the UNIX server system. Please tell me more about other vender, and their products thxs!

3. IP Networking

enhanced tcpdump is needed

Are there any standard programs in linux/unix like tcpdump that store packets' headers in db (Berkeley DB is preffered, including secondary db's to index stored headers by IP addesses, TCP flows, etc.), provide search in db and convert found headers to tcpdump dumpfile format?

4. Shell Programming and Scripting

enhanced substitution

Dear I have a problem on which I turn araound since hours. Hope you could help me. I have a bash script, which activates with "nohup ./script2 params & " several subscripts. In my main script, I have set lot's of variables, which I would pass into script 2. My idea is now to create a...

5. UNIX for Dummies Questions & Answers

Convergent Enhanced Ethernet

Hi. I guess this my dummy question is for super-gurus. I'm on Red Hat' documentation regarding their RDMA capabilities over "convergent" Ethernet network. I read everything that I could find on inet, wikipedia etc. about the technology itself. I can't figure out, how can I determine if the...

6. AIX

Normal VG to Enhanced Concurrent VG

Hi All, I am going to perform some activity in 2Node HA Server(Active/Passive). For that i have to do some pre-requsite (ie., Resource Group VG's should be Enhanced-Concurrent) In my setup, we have two volume groups in one RG. In that one VG is Normal and another is Enhance Concurrent. ...

7. What is on Your Mind?

New Enhanced Forum Features for VIP Members

Dear All, Thank you for your support. As promised I have upgrade features for unix.com forum VIP members as follows: Who's Online Permissions Can View IP Addresses Can View Detailed Location Info for Users Can View Detailed Location Info of Users Who Visit Bad / No Permission...

LEARN ABOUT DEBIAN

lchage

lchage(8)						      System Manager's Manual							 lchage(8)

NAME

       lchage - Display or change user password policy

SYNOPSIS

       lchage [OPTION]... user

DESCRIPTION

       Displays or allows changing password policy of user.

OPTIONS

       -d, --date=days
	      Set the date of last password change to days after Jan 1 1970.

       -E, --expire=days
	      Set the account expiration date to days after Jan 1 1970.  Set days to -1 to disable account expiration.

       -i, --interactive
	      Ask all questions when connecting to the user database, even if default answers are set up in libuser configuration.

       -I, --inactive=days
	      Disable the account after days after password expires (after the user user is required to change the password).

       -l, --list
	      Only list current user's policy and make no changes.

       -m, --mindays=days
	      Require at least days days between password changes.  Set days to 0 to disable this checking.

       -M, --maxdays=days
	      Require changing the password after days since last password change.  Set days to 99999 to disable this checking.

       -W, --warndays=days
	      Start warning the user days before password expires (before the user is required to change the password).

EXIT STATUS

       The exit status is 0 on success, nonzero on error.

libuser 							    Jan 12 2005 							 lchage(8)