Re: Vendor Automatic account expiration script

From: Green, Simon (Simon.Green@EU.ALTRIA.COM)
Date: Thu Dec 11 2003 - 06:27:42 EST


Is there no way you can simply use the normal user characteristics? Perhaps
maxage=2, maxexpired=0. Not quite what you're trying for, but it has a
similar effect.

I would recommend against putting anything in .profile. What's to stop a
user seeing what you're doing, then just scheduling it to run once a week?

It would be better to have it external to the user login, and not executable
by normal users.

I did something like this a while back, and I had a single script running
once per day which just did "last -1 <user>" then either left the userid
alone or locked it, depending on the outcome. (I'd give you the script, but
it was very, very basic and didn't do any date checking: just if they'd
logged on since wtmp was last cleared down.)

Simon Green
Altria ITSC Europe Ltd

AIX-L Archive at https://new-lists.princeton.edu/listserv/aix-l.html
<https://new-lists.princeton.edu/listserv/aix-l.html>

AIX FAQ at http://www.faqs.org/faqs/aix-faq/
<http://www.faqs.org/faqs/aix-faq/>

N.B. Unsolicited email from vendors will not be appreciated.
Please post all follow-ups to the list.

-----Original Message-----
From: Dearman, Richard [mailto:rdearm1@UIC.EDU]
Sent: 10 December 2003 18:10
To: aix-l@Princeton.EDU
Subject: Vendor Automatic account expiration script

Before I start working on the script I figured I would ask you guys to see
if has already been done so I'm not re-inventing the wheel

I want to setup my vendor accounts to automatically expire 14days after
their login. So if they login within that 14 day period again the
expiration would roll forward another 14 days from that login. After 14
days of no login they would be locked out and need to manually be unlocked
by me. I figured I would add the script to the .profile of each vendor
account.

Do any of you guys do anything like this now and if so could you forward me
your script.



This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 22:17:24 EDT