Re: Locked accounts

["Robert Davies" <Rob_Davies@NTLWorld.Com>]

> This is the way I do it, may not be the best but it works.  All disabled
> accounts start with '!' in the encrypted password, so if you do a
> 'radius:/etc# cat shadow |grep :!' in your path of your shadow file it
will
> show accounts that are disabled.

egrep ':![^!]' /etc/shadow

That's : followed by ! followed by something that's not a !.
Reason for that is :!!: apears in shadow on many systems for accounts, which
have never had a password set.

Prefer egrep as you can search for alternatives 'cat|dog' and it uses a DFA
engine.

Rob