How to determine when a user's account will be locked in HP-UX

Question

I'm trying to figure out how to determine when user accounts on an HP-UX server will be locked. I would need this for every user on the server.

On other kinds of UNIX, this kind of this is typically found in the /etc/shadow file as the 8th field in each row (# of days since the 1/1/1970 when the account will be disabled).

Solution

From what I've been reading, this will do it:

/usr/lbin/getprpw -r -m acctexp <username>

http://www.hpuxtips.es/?q=node/157

http://fixunix.com/security/74478-scripts-needed-trusted-hp-ux-system.html

Comments

[skinp]

If you are on a trusted system, it is not there and replaced (never used it so I don't really know). If not, I strongly suggest, for security reasons, you convert your /etc/passwd with the command pwconv which will create the /etc/shadow file.