Configuration Files and Commands for User Management in AIX

The files listed below are some important files for User Management in AIX

/etc/security/environ	lists environment attributes for each user
/etc/security/lastlog	lists last login attributes for each user
/etc/security/limits	lists process resource limits for each user
/etc/security/user	lists extended user attributes for  each user
/usr/lib/security/mkuser.default	lists default attributes for new users
/usr/lib/security/mkuser.sys	script that sets up the user's environment
/etc/passwd	lists basic user attributes for each user
/etc/security/passwd	contains password information for each user
/etc/security/login.cfg	lists login security information for each user
/etc/utmp	contains users that are logged into the system, used by the   "who" command
/var/adm/wtmp	contains connect time information for users
/etc/security/failedlogin	contains unsuccessful login attempts
/etc/motd	message of the day that is displayed when the user logs in.
/etc/environment	Lists the default environment that new processes will use.
/etc/profile	environment settings for all  users
$HOME/.profile	environment settings for a specific user
/etc/group	lists attributes for each group
/etc/security/group	lists extended attributes for each group

Use the file /etc/security/user attributes to know about the following:

account_locked	true or false
expires	Expiration time for a user account.  MMDDHHMMYY,  a value of 0 indicates    no expiration
loginretires	Number of invalid login attempts before a users is not allowed to login.  A   value of 0 indicates this attribute is disabled.
maxage	Maximum number of weeks a password is valid, a value of 0 indicates   unlimited
minage	Minimum nuimber of weeks between password changes.

Commands for User Administration in AIX :

mkuser	To the creates a new user
passwd	change the user's password
chuser	change the user's attributes
luser	lists the attributes for a specific    user account
lsuser -f	lists each attribute on it's own   line
rmuser	utility that removes a user
chsec	change the user's security    attributes
login	lists who is currently logged into   the system
who
whoami (who am i)	displays information about yourself

Procedure to add a new user:

    mkuser <USERNAME> or  smitty mkuser

Procedure to change the password of a User:

passwd <USERNAME>

Note: The account needs to be reset if when trying to log in the following message is received:

3004-303 There have been too many unsuccessful login attempts; please see

        the system administrator.

Use the below commands to reset the account:

chsec -f /etc/security/lastlog -a "unsuccessful_login_count=0" –s <USERNAME>

chuser "account_locked=false"  <USERNAME>

Author : LazySystemAdmin

Share this

Related Posts