document/TranslateProject
2
0
Fork 0
mirror of https://github.com/LCTT/TranslateProject.git synced 2024-12-26 21:30:55 +08:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #16981 from lujun9972/add-MjAyMDAxMTAgQmFzaCBTY3JpcHQgdG8gU2VuZCBlTWFpbCBXaXRoIGEgTGlzdCBvZiBVc2VyIEFjY291bnRzIEV4cGlyaW5nIGluIC1YLSBEYXlzLm1kCg==

Browse Source 
自动选题: 20200110 Bash Script to Send eMail With a List of User Accounts Expiring in “X” Days
This commit is contained in:
Xingyu.Wang 2020-01-10 10:25:39 +08:00 committed by GitHub
commit 05e9de14c2
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 140 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

140
sources/tech/20200110 Bash Script to Send eMail With a List of User Accounts Expiring in -X- Days.md Normal file
View File

@ -0,0 +1,140 @@
[#]: collector: (lujun9972)
[#]: translator: ( )
[#]: reviewer: ( )
[#]: publisher: ( )
[#]: url: ( )
[#]: subject: (Bash Script to Send eMail With a List of User Accounts Expiring in “X” Days)
[#]: via: (https://www.2daygeek.com/bash-script-to-check-user-account-password-expiry-linux/)
[#]: author: (Magesh Maruthamuthu https://www.2daygeek.com/author/magesh/)
Bash Script to Send eMail With a List of User Accounts Expiring in “X” Days
======
The password enforcement policy is common to all operating systems and applications.
If you want to **[implement a password enforcement policy on Linux][1]**, go to the following article.
The password enforcement policy will be enforced by most companies by default, but the time period will be different depending on the company’s requirements.
Usually everyone uses a 90-days password cycle.
The user will only **[change the password][2]** on some of the servers they use, and they won’t change the password on the servers they don’t use often.
In particular, most team forget to change the service account password, which can lead to breaking regular jobs even if they are configured to work with **[SSH key-based authentication][3]**.
SSH key-based authentication and **[cronjobs][4]** will not work if the user account password expires.
To avoid this situation, we have created a **[shell script][5]** that sends you a list of user accounts that expire within 10 days.
There are two **[bash scripts][6]** included in this tutorial that will help you collect information about user expiration days on your system.
### 1) Bash Script to Check List of User Accounts Expiring in 10 Days
This script will help you to check the list of user accounts that expire in 10 days on your terminal.
```
# vi /opt/script/user-password-expiry.sh
#!/bin/sh
/tmp/user-expiry-1.txt
/tmp/user-expiry.txt
echo "-------------------------------------------------"
echo "UserName The number of days the password expires"
echo "-------------------------------------------------"
for usern in u1 u2 u3 u4
do
today=$(date +%s)
userexpdate=$(chage -l $usern | grep 'Password expires' |cut -d: -f2)
passexp=$(date -d "$userexpdate" "+%s")
exp=`expr \( $passexp - $today \)`
expday=`expr \( $exp / 86400 \)`
echo "$usern $expday" >> /tmp/user-expiry.txt
done
cat /tmp/user-expiry.txt | awk '$2 <= 10' > /tmp/user-expiry-1.txt
cat /tmp/user-expiry-1.txt | column -t
```
Set an executable Linux file permission to **“user-password-expiry.sh”** file.
```
# chmod +x /opt/script/user-password-expiry.sh
```
You will get an output like the one below. But the username and days may be different
```
# sh /opt/script/user-password-expiry.sh
-------------------------------------------------
UserName The number of days the password expires
-------------------------------------------------
u1 -25
u2 9
u3 3
u4 5
```
### 2) Bash Script to Send eMail With a List of User Accounts Expiring in 10 Days
This script will send a mail with a list of user accounts expiring in 10 days.
```
# vi /opt/script/user-password-expiry-mail.sh
#!/bin/sh
SUBJECT="Information About User Password Expiration on "`date`""
MESSAGE="/tmp/user-expiry.txt"
MESSAGE1="/tmp/user-expiry-1.txt"
TO="[email protected]"
echo "-------------------------------------------------" >> $MESSAGE1
echo "UserName The number of days the password expires" >> $MESSAGE1
echo "-------------------------------------------------" >> $MESSAGE1
for usern in u1 u2 u3 u4
do
today=$(date +%s)
userexpdate=$(chage -l $usern | grep 'Password expires' |cut -d: -f2)
passexp=$(date -d "$userexpdate" "+%s")
exp=`expr \( $passexp - $today \)`
expday=`expr \( $exp / 86400 \)`
echo "$usern $expday" >> $MESSAGE
done
cat $MESSAGE | awk '$2 <= 10' >> $MESSAGE1
mail -s "$SUBJECT" "$TO" < $MESSAGE1
rm $MESSAGE
rm $MESSAGE1
```
Set an executable Linux file permission to **“user-password-expiry-mail.sh”** file.
```
# chmod +x /opt/script/user-password-expiry-mail.sh
```
Finally add a **[cronjob][4]** to automate this. It runs once in a day at 8AM.
```
# crontab -e
0 8 * * * /bin/bash /opt/script/user-password-expiry-mail.sh
```
You will receive a mail similar to the first shell script output.
--------------------------------------------------------------------------------
via: https://www.2daygeek.com/bash-script-to-check-user-account-password-expiry-linux/
作者：[Magesh Maruthamuthu][a]
选题：[lujun9972][b]
译者：[译者ID](https://github.com/译者ID)
校对：[校对者ID](https://github.com/校对者ID)
本文由 [LCTT](https://github.com/LCTT/TranslateProject) 原创编译，[Linux中国](https://linux.cn/) 荣誉推出
[a]: https://www.2daygeek.com/author/magesh/
[b]: https://github.com/lujun9972
[1]: https://www.2daygeek.com/how-to-set-password-complexity-policy-on-linux/
[2]: https://www.2daygeek.com/linux-passwd-chpasswd-command-set-update-change-users-password-in-linux-using-shell-script/
[3]: https://www.2daygeek.com/configure-setup-passwordless-ssh-key-based-authentication-linux/
[4]: https://www.2daygeek.com/linux-crontab-cron-job-to-schedule-jobs-task/
[5]: https://www.2daygeek.com/category/shell-script/
[6]: https://www.2daygeek.com/category/bash-script/