[Freeipa-users] Re: Inactive users

[Rob Crittenden]

lune voo via FreeIPA-users wrote:
>  Hey guys !
>  
>  And if we want to do that for all the users ?
>  
>  Is it better to use an ipa user-find --sizelimit=2000 --all with a grep 
>  of is there another solution more appropriate ? 
It's not really the same thing. user-status polls each IPA Master to 
determine the lockout status which also conveniently for you includes 
the last successful and failed login attempts. user-find won't do this.

You could use user-find to find all the login names and then iterate a 
user-status on them but be aware that this could be pretty intensive.

rob

>  
>  Thank you in advance for your help.
>  
>  Best regards.
>  
>  Lune.
>  
>  Le ven. 16 août 2019 à 14:14, Rob Crittenden via FreeIPA-users 
>  <freeipa-users(a)lists.fedorahosted.org 
>  <mailto:[e-mail]>> a écrit :
>  
>      Arpit Tolani via FreeIPA-users wrote:
>       > It is never synced across masters, Check this on all servers.
>       >
>       > ipa user-show --all --raw <user> | grep krbLastSuccessfulAuth
>  
>      ipa user-status <user> will do this.
>  
>      rob
>  
>       >
>       >
>       >
>       > On Fri, Aug 16, 2019 at 3:12 PM Boyd Ako via FreeIPA-users
>       > <freeipa-users(a)lists.fedorahosted.org
>      <mailto:[e-mail]>
>       > <mailto:[e-mail]
>      <mailto:[e-mail]>>> wrote:
>       >
>       >     Is there any way to check when a user has last logged into any of
>       >     the systems? I've tried `ipa user-show`, but the "Last Successful
>       >     Authentication" is N/A.
>       >     _______________________________________________
>       >     FreeIPA-users mailing list --
>      freeipa-users(a)lists.fedorahosted.org
>      <mailto:[e-mail]>
>       >     <mailto:[e-mail]
>      <mailto:[e-mail]>>
>       >     To unsubscribe send an email to
>       > freeipa-users-leave(a)lists.fedorahosted.org
>      <mailto:[e-mail]>
>       >     <mailto:[e-mail]
>      <mailto:[e-mail]>>
>       >     Fedora Code of Conduct:
>       > https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>       >     List Guidelines:
>      https://fedoraproject.org/wiki/Mailing_list_guidelines
>       >     List Archives:
>       >
>      https://lists.fedorahosted.org/archives/list/[e-mail]...
>       >
>       >
>       >
>       > --
>       > Thanks & Regards
>       > Arpit Tolani
>       >
>       >
>       >
>       > _______________________________________________
>       > FreeIPA-users mailing list --
>      freeipa-users(a)lists.fedorahosted.org
>      <mailto:[e-mail]>
>       > To unsubscribe send an email to
>      freeipa-users-leave(a)lists.fedorahosted.org
>      <mailto:[e-mail]>
>       > Fedora Code of Conduct:
>      https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>       > List Guidelines:
>      https://fedoraproject.org/wiki/Mailing_list_guidelines
>       > List Archives:
>      https://lists.fedorahosted.org/archives/list/[e-mail]...
>       >
>      _______________________________________________
>      FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
>      <mailto:[e-mail]>
>      To unsubscribe send an email to
>      freeipa-users-leave(a)lists.fedorahosted.org
>      <mailto:[e-mail]>
>      Fedora Code of Conduct:
>      https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>      List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>      List Archives:
>      https://lists.fedorahosted.org/archives/list/[e-mail]...
>  
>  
>  
>  _______________________________________________
>  FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
>  To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
>  Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives:
> https://lists.fedorahosted.org/archives/list/[e-mail]...
>