Password reset for multiple users script in AIX

geekslinux · 04-30-2017, 12:12 PM

Below script has user names in text file as input. For this script, some users password reset is working and for others password is not reset. Need your help in fixing this script. All are local system user accounts.

Code:

#!/bin/ksh
for i in `cat users.txt`
do
if[`id $i >/dev/null 2>&1;echo $?` -eq 0]
then
echo $i:$i
echo "$i:$i" | chpasswd -c
chesec -f /etc/security/lastlog-a "unsuccessful_login_count=0" -s $i
chuser account_locked=false $i
else
     printf "user: $i does not exist on this system\n"
fi
done

TB0ne · 04-30-2017, 03:43 PM

Quote:

Originally Posted by geekslinux

Below script has user names in text file as input. For this script, some users password reset is working and for others password is not reset. Need your help in fixing this script. All are local system user accounts.

Code:

#!/bin/ksh
for i in `cat users.txt`
do
if[`id $i >/dev/null 2>&1;echo $?` -eq 0]
then
echo $i:$i
echo "$i:$i" | chpasswd -c
chesec -f /etc/security/lastlog-a "unsuccessful_login_count=0" -s $i
chuser account_locked=false $i
else
     printf "user: $i does not exist on this system\n"
fi
done

Please use CODE tags when posting scripts. And we'll be happy to help...when you actually tell us what error(s)/message(s) you're seeing, what diagnostic information you have, etc. "Not reset" for some, doesn't tell us anything. What's the differences between the accounts that work and the ones that don't? Have you run the script with any sort of debugging? Tried to run the commands manually on those that didn't work, to see what happened???

geekslinux · 05-01-2017, 05:43 AM

This is the output of the script. NB the users are there but not sure from where it fetches "User x does not exist". For some users when they gave username and password they were able to login. For certain users when they enter password it says "permission denied"

Code:

> ksh -x password-reset.ksh
+cat users.txt
+id ab123
+ 1> /dev/null 2>& 1
+echo 0
+[0 -eq 0]
+echo ab123:ab123
ab123:ab123
+chpasswd -c
+echo ab123:
3004-687 User "ab123" does not exist
+chsec -f /etc/security/lastlog-a unsuccessful_login_count=0-s ab123
+chuser account_locked=false ab123
+id ac234
+1> /dev/null 2>& 1
+echo 0
+[0 -eq 0]
+echo ac234:ac234
ac234:ac234
+chpasswd -c
+echo ac234:
3004-687 User "ac234" does not exist
+chsec -f /etc/security/lastlog-a unsuccessful_login_count=0-s ac234
+chuser account_locked=false ac234

TB0ne · 05-01-2017, 07:30 AM

Quote:

Originally Posted by geekslinux

This is the output of the script. NB the users are there but not sure from where it fetches "User x does not exist". For some users when they gave username and password they were able to login. For certain users when they enter password it says "permission denied"

Code:

> ash -x password-reset.ksh
+cat users.txt
+id ab123
+ 1> /dev/null 2>& 1
+echo 0
+[0 -eq 0]
+echo ab123:ab123
ab123:ab123
+chpasswd -c
+echo ab123:
3004-687 User "ab123" does not exist
+chsec -f /etc/security/lastlog-a unsuccessful_login_count=0-s ab123
+chuser account_locked=false ab123
+id ac234
+1> /dev/null 2>& 1
+echo 0
+[0 -eq 0]
+echo ac234:ac234
ac234:ac234
+chpasswd -c
+echo ac234:
3004-687 User "ac234" does not exist
+chsec -f /etc/security/lastlog-a unsuccessful_login_count=0-s ac234
+chuser account_locked=false ac234

So you're running a ksh script with ash? Why? And as asked previously, what happens when you take one of the users you're having problems with, and run the script commands manually??

geekslinux · 05-01-2017, 08:47 AM

Sorry. It's a typo, I am running it as ksh. When I reset the password manually it works for the user. But resetting using script it's not working. It's only for few users across 10 servers where I run the script. Not all the users have this problem.

TB0ne · 05-01-2017, 08:56 AM

Quote:

Originally Posted by geekslinux

Sorry. It's a typo, I am running it as ksh. When I reset the password manually it works for the user. But resetting using script it's not working. It's only for few users across 10 servers where I run the script. Not all the users have this problem.

Then the problem isn't in the script; there's a difference in the users, somewhere.

Quote:

Originally Posted by geekslinux

NB the users are there but not sure from where it fetches "User x does not exist".

That's the output from a command...telling you it can't find that user ID. Aren't you providing the input list of users? Have you checked it for control/whitespace characters? There's obviously something wrong with the input data, or a difference between the users that work and don't.

pan64 · 05-01-2017, 09:14 AM

if[`id $i >/dev/null 2>&1;echo $?` -eq 0] can be definitely simplified:

Code:

if id $i >/dev/null 2>&1; then
...
else
   printf "user: $i does not exist on this system\n"
fi

next, that kind of for loop is not suggested, because it won't work properly in some cases.... but it depends on the input file you have.

Are these users local on that host?

geekslinux · 05-01-2017, 09:24 AM

Thanks for the reply. The users are all local users and they are available in the server. It works if I reset the password manually. The text file format is as follows
ab123
cd234

Also checked for white spaces nothing found.

DukeSSD · 05-01-2017, 06:43 PM

How did you check for white spaces?

# cat -???

pan64 · 05-02-2017, 12:31 AM

for me it looks very strange:
id reported user exists, chpasswd reported user does not exist.
did you try it without script (I mean the same user, same commands)?
you can also try to write a simple script:

Code:

#!/bin/ksh

username=something
id $username
echo "$username:$username" | chpasswd -c
chesec -f /etc/security/lastlog-a "unsuccessful_login_count=0" -s $username
chuser account_locked=false $username

to check if that work...

cliffordw · 05-02-2017, 09:42 AM

Hi geekslinux,

There seem to be some inconsistencies in your output, which makes it hard to see what's going on here. For example, the script says:

Code:

chesec -f /etc/security/lastlog-a "unsuccessful_login_count=0" -s $i

but the output says:

Code:

+chsec -f /etc/security/lastlog-a unsuccessful_login_count=0-s ab123

with no space before the "-s". If you're copying and pasting, this seems very strange.

In any case, to me it looks like there might be something funny in the script with the "echo" statements (possibly a special character or something). The code:

Code:

echo $i:$i
echo "$i:$i" | chpasswd -c

looks like it should echo the same information, but in the output this differs:

Code:

+echo ab123:ab123
ab123:ab123
+chpasswd -c
+echo ab123:

Any idea why this might be? I'd suggest you look carefully at the second "echo" for anything strange.

Good luck!

Clifford

geekslinux · 05-02-2017, 12:53 PM

Thank you all. Yes cliff you are right

It was a typo error echo "$i:$" was there in the file as echo .$i:$i. this caused problems in the script. Now it works fine.