HP-UX Reference (11i v1 00/12) - 1M System Administration Commands A-M (vol 3)
__________________________________________________________________________________________________________________________________________________________________________________________________
__________________________________________________________________________________________________________________________________________________________________________________________________
STANDARD Printed by: Nora Chuang [nchuang] STANDARD
/build/1111/BRICK/man1m/!!!intro.1m
________________________________________________________________
___ ___
g
getprpw(1M) getprpw(1M)
NAME
getprpw - display protected password database
SYNOPSIS
getprpw [-l|-n [domain]] [-r][-m parm[,parm]] username
DESCRIPTION
getprpw displays the user’s protected password database settings. This command is available only to the
superuser in a trusted system. Normally it is only used via SAM, see sam(1M).
The database contains information for both local and NIS+ users. However, some NIS+ information is kept
on the master. Since a user may be both local and NIS+, getprpw uses the nsswitch.conf(4) default if nei-
ther -l nor -n are specified.
Options
getprpw recognizes the following options...
-l Specifies to get information from the local user.
-n Can be specified with or without domain name; i.e.,
-n [domain]. If -n [domain] is specified,
displays data for the NIS+ user. The domain name must be fully qualified, with a terminating period.
If domain name is not specified, the local domain will be used.
-r Displays the arguments supplied to -m in raw format
-m Displays the database value for the argument passed.
An "invalid-opt" is printed if a list of options passed to
-m contains an invalid option. The rest of the
options will be processed. If
getprpw is specified without -m, all parameters are displayed in the
order given below.
Boolean values are returned as YES, NO,orDFT (for system default values in
/tcb/files/auth/system/default
).
Numeric values are specified as positive numbers, 0, or -1. A value of -1 indicates that the field has
not been assigned a value in the database.
Units of time are returned in number of days (>=0), although the database keeps them in seconds.
This and other minor differences between the command parameters and the database fields are con-
sistent with modprpw(1M).
The following parameters for the user can be displayed using the
-m option.
They are listed below in the order shown in prot.h. The database fields are fully explained in
prpwd(4).
uid user uid
bootpw boot authorization flag
audid audit id
audflg audit flag
mintm minimum time between password changes
maxpwln maximum password length
exptm password expiration time
lftm password lifetime
spwchg last successful password change time
upwchg last unsuccessfulpassword change time
acctexp account expiration time
llog last login time interval
expwarn password expiration warning time
usrpick whether user picks password, YES/NO/DFT
Section 1M−−296 − 1 − HP-UX Release 11i: December 2000
___
___