AIX

Hi,

There's a report the previous AIX admin used to do and I couldn't find it on the AIX /etc/security. I think this customized.

Last update report (sample):

USER NAME IN REAL LIFE DATE LAST CHANGED PASSWORD
---- ----------------- --------------------------
adm - Password has never changed 0000
bin - Password has never changed 0000
daemon - Password has never changed 0000
guest - Password has never changed 0000
invscout - Password has never changed 0000
ilp ilp-remote print capability Wed Sep 30 10:16:18 1998
admsoft admin applic software Mon Nov 14 16:05:48 2005
admthird 3rd party software security Mon Nov 14 16:06:05 2005
admasec internal application security Mon Nov 14 16:06:26 2005


Here's lastlog report (sample):

ilp Mon Feb 22 09:39:48 1999 Tue Jul 28 08:19:13 1998 0 ladaf /dev/pts/137 /dev/pts/71 ilp-remote print cap
admthird Wed Aug 1 14:23:47 2001 Mon Jun 4 17:19:19 2001 0 190.1.1.74 /dev/pts/21 /dev/pts/3 3rd party software s
admsoft Thu Nov 8 18:02:14 2001 Mon Jun 18 19:35:14 2001 0 190.1.1.161 /dev/pts/1 /dev/pts/10 admin applic softwar


Is this customized because I could find something similar with lastlog on etc/security/lastlog? The only problem is the date/time is coded, I don't understand this.

Where can I find this report on AIX43?

Thanks in advance,
itik

The informatin presented here is partly from "/etc/passwd" and partly from "/etc/security/passwd". You could use the commands "lsuser" and "pwdadm" to retrieve them (or, of course, cat/grep/cut/.../ them directly from the mentioned files).

bakunin

The lastlogon report can be run by just "last" command.

The last update of the password report, still looking on it. Can't do copy and paste (or create a script) on /etc/security/passwd because the lastupdate info is not a friendly date format. Need to find the conversion formula for it.

itik, to me the "lastupdate" look just like in ordinary epoch format.

bakunin