User & Group Management

Stop being blindsided by expired user accounts

🧩 The Challenge

Dealing with a production box where someone suddenly can’t log in because their shadow entry expired is a headache nobody needs on a Friday afternoon. It’s usually the result of some forgotten policy that kicked in months ago.

💡 The Fix

Use chage to check the password aging info for your users before you start ripping the authentication stack apart. It saves you from troubleshooting PAM configs when the fix is just one command away.

sudo chage -l username

⚙️ Why It Works

Running this tells you exactly when the password expires and if the account itself is locked by a date limit in /etc/shadow. It reads the raw aging data directly so you aren’t guessing what the OS is thinking.

🚀 Pro-Tip: Pipe it into awk if you’re auditing a whole server to find who is about to get locked out.

Linux Tips & Tricks | © ngelinux.com | 10/30/2026