lsuser

Use the lsuser command to display a list of the users that are created on the system.

Syntax

Read syntax diagramSkip visual syntax diagram lsuser user_nameuser_id

Parameters

-delim delimiter
(Optional) Specify a delimiter to separate data in the output.
-nohdr
(Optional) Suppress the headings in the output.
-filtervalue attribute=value
(Optional) Specifies a list of one or more filters. Only objects with a value that matches the filter attribute value are displayed.
-filtervalue?
(Optional) Displays a list of valid filter attributes.
user_name | user_id
(Optional) If this parameter is specified, the detailed view for the specified user is displayed in the output. If you do not specify an ID or name, the concise view is displayed.

Description

This command displays a list of users that is created on the system.

This table provides the possible values that are displayed for the lsuser command.

Table 1. lsuser attribute values
Attribute Value
id Specifies the ID of the user.
name Specifies the name of the user.
password Specifies if a password is set for the user.
ssh_key Specifies if an SSH key is set for the user.
remote Specifies if the user is remote.
usergrp_id Specifies the ID of a local user’s group, or is left blank for a remote user.
usergrp_name Specifies the name of a local user’s group, or is left blank for a remote user.
owner_id Specifies the ID of the ownership group.
owner_name Specifies the name of the ownership group.
locked Specifies whether a user is locked or not. The possible values are:
  • no - The user is unlocked.
  • auto (blank) - The user is permanently locked due to exceeding the max_failed_login_attempts when the value of lockout_period is 0.
  • auto (timestamp) - The user is temporarily locked until the time specified due to exceeding the max_failed_login_attempts when the value of lockout_period is in the range 1 - 10080.
  • manual - The user is permanently locked due to the security administrator using the chuser -lock id command.
    Note: When locked is set to manual, the superuser is permanently locked. This permanent locking occurs when the security administrator runs the chuser -lock superuser command or enables two person integrity (TPI) with the chsecurity -twopersonintegrity yes command.
locked_until Specifies a timestamp that displays the time in the format YYMMDDHHMMSS when the user account automatically unlocks.
password_expiry_time Specifies a timestamp that displays the time in the format YYMMDDHHMMSS when the user's password expires.
password_change_required Specifies whether a user's password is expired. The value is either yes or no. The value is set to yes when the password expires or if the chuser -forcepasswordchange command is used.
certuid Specifies a Unique ID that can be used by the authentication services that might run on the system. It must consist of a string up to 255 printable ASCII characters.