Hi list,

For PCI reasons I have to report all accounts which have been inactive
(i.e. no logins) for three months.  The goal here is to automate the
process...

I know I can get users and login dates from krb5kdc.log, and I can
find the last login date.  However Kerberos logs dates as "month day",
so to do date math for dates going back into last year is awkward at
best.  So...

a) can I configure Kerberos to log "month day year"?
b) is there a better way to do this audit?

Thanks,

-- 
Steve Glasser
[email protected]
________________________________________________
Kerberos mailing list           [email protected]
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to