User & Group Management

Stop manually verifying account lockouts

🧩 The Challenge

Dealing with a vendor who keeps guessing passwords until the account hits the lockout policy is a headache. Then you end up manually checking /etc/shadow for every single account to see which one got locked.

💡 The Fix

Use chage to dump the account status in a clean, readable format instead of trying to parse cryptic date fields in shadow files. It saves you from staring at epoch timestamps until your eyes cross.

chage -l username

⚙️ Why It Works

The utility pulls the information directly from the shadow file and translates the raw numeric fields into human-readable expiration and lockout status. It’s built for exactly this so stop fighting the raw file directly.

🚀 Pro-Tip: Pipe it to grep if you are auditing a whole list of users in a loop.

Linux Tips & Tricks | © ngelinux.com | 9/25/2026