Is there any software that can identify Unix IDs in a NIS (Solaris 9) environment that have not been used for a given period of time (say four months) and generate deletion commands?
QUESTION POSED ON: 17 OCT 2005
QUESTION ANSWERED BY: Bob Konigsberg
I don't know offhand (haven't used NIS in a few years), but this sounds like the sort of thing that would be best done with a script on the NIS authentication server.
One thing you haven't specified is whether you just want to clean up existing IDs as an event as opposed to building an ongoing process. If you're willing to go the process route, then I'd suggest a script based on the following:
- Get a list of all IDs on the system, and tag them with today's date -- this is your benchmark database
- As logins occur, retag each ID with the new date.
- Once the dates reach your chosen expiry, generate a delete command.
If you want to be cautious, then have the script e-mail you instead of directly deleting IDs.
|
 |
|