<div dir="ltr">I checked the script and it is fine. The problem arise when the user is not present in the LDAP database. Therefore, the account doesn't have shadowMax field as the script complaint. For instance, the user "german" only exists in the /etc/passwd file. </div><div class="gmail_extra"> <div class="gmail_quote">On Sun, Jan 31, 2016 at 3:54 PM, Bernie Innocenti <<a href="mailto:bernie@codewiz.org" target="_blank">bernie@codewiz.org</a>> wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On 01/31/2016 10:42 AM, Samuel Cantero wrote: > ¿Should be deactivate those users? Yes, let's deactivate them please. Ancient accounts constitute a (small, but non-zero) security risk. That's why we expire passwords every 6 months. There's a script to do that quickly: system-userdel <user> It preserves the home in /home/_disabled/<user>.disabled Also, there must be a bug in my cronjob: it doesn't print the username for the immortal users. <div><div class="h5"> > ---------- Forwarded message ---------- > From: Cron Daemon <<a href="mailto:root@sugarlabs.org">root@sugarlabs.org</a>> > Date: Sun, Jan 31, 2016 at 3:47 AM > Subject: [Systems-logs] Cron <root@sunjammer> test -x /usr/sbin/anacron || > ( cd / && run-parts --report /etc/cron.weekly ) > To: <a href="mailto:root@sugarlabs.org">root@sugarlabs.org</a> > > > /etc/cron.weekly/check_pwd_expire: > Note: user adborden password has expired since 1440 days > Note: user aguz password has expired since 489 days > Note: user aklis password has expired since 824 days > Note: user aneesh password has expired since 584 days > Note: user bernie2 password has expired since 1377 days > Note: user caspar password has expired since 1137 days > Note: user danishka password has expired since 1221 days > Note: user djbclark password has expired since 1573 days > Note: user dnarvaez password has expired since 576 days > Note: user dpic password has expired since 1438 days > Note: user fdanesse password has expired since 670 days > Note: user gboudrias password has expired since 1334 days > Warning: user has no shadowMax field in LDAP database > Note: user iraguet password has expired since 411 days > Warning: user has no shadowMax field in LDAP database > Note: user manuq password has expired since 527 days > Note: user nitika password has expired since 960 days > Warning: user has no shadowMax field in LDAP database > Note: user sridhar password has expired since 730 days > Note: user valerie password has expired since 1325 days > Note: user vueltaciclista password has expired since 1573 days > _______________________________________________ > Systems-logs mailing list > <a href="mailto:Systems-logs@lists.sugarlabs.org">Systems-logs@lists.sugarlabs.org</a> > <a href="http://lists.sugarlabs.org/listinfo/systems-logs" rel="noreferrer" target="_blank">http://lists.sugarlabs.org/listinfo/systems-logs</a> > > > </div></div>> _______________________________________________ > Systems mailing list > <a href="mailto:Systems@lists.sugarlabs.org">Systems@lists.sugarlabs.org</a> > <a href="http://lists.sugarlabs.org/listinfo/systems" rel="noreferrer" target="_blank">http://lists.sugarlabs.org/listinfo/systems</a> > -- _ // Bernie Innocenti \X/ <a href="http://codewiz.org" rel="noreferrer" target="_blank">http://codewiz.org</a> _______________________________________________ Systems mailing list <a href="mailto:Systems@lists.sugarlabs.org">Systems@lists.sugarlabs.org</a> <a href="http://lists.sugarlabs.org/listinfo/systems" rel="noreferrer" target="_blank">http://lists.sugarlabs.org/listinfo/systems</a> </blockquote></div> </div>