|
NAME | SYNOPSIS | DESCRIPTION | OPTIONS | EXIT STATUS | NOTES | HISTORY | AUTHORS | SEE ALSO | REPORTING BUGS | AVAILABILITY |
|
|
|
LSLOGINS(1) User Commands LSLOGINS(1)
lslogins - display information about known users in the system
lslogins [options] [-s|-u[=UID]] [-g groups] [-l logins]
[username]
Examine the wtmp and btmp logs, /etc/shadow (if necessary) and
/passwd and output the desired data.
The optional argument username forces lslogins to print all
available details about the specified user only. In this case the
output format is different than in case of -l or -g and unknown is
username reported as an error.
The default action is to list info about all the users in the
system.
Mandatory arguments to long options are mandatory for short
options too.
-a, --acc-expiration
Display data about the date of last password change and the
account expiration date (see shadow(5) for more info).
(Requires root privileges.)
--btmp-file path
Alternate path for btmp.
-c, --colon-separate
Separate info about each user with a colon instead of a
newline.
-e, --export
Output data in the format of NAME=VALUE. See also option
--shell.
-f, --failed
Display data about the users' last failed login attempts.
-G, --supp-groups
Show information about supplementary groups.
-g, --groups groups
Only show data of users belonging to groups. More than one
group may be specified; the list has to be comma-separated.
Unknown group names are ignored.
Note that the relation between user and group may be invisible
for the primary group if the user is not explicitly specified
as group member (e.g., in /etc/group). If the command lslogins
scans for groups then it uses the groups database only, and
the user database with primary GID is not used at all.
-L, --last
Display data containing information about the users' last
login sessions.
-l, --logins logins
Only show data of users with a login specified in logins (user
names or user IDs). More than one login may be specified; the
list has to be comma-separated. Unknown login names are
ignored.
-n, --newline
Display each piece of information on a separate line.
--noheadings
Do not print a header line.
--notruncate
Don’t truncate output.
-o, --output list
Specify which output columns to print. The default list of
columns may be extended if list is specified in the format
+list.
--output-all
Output all available columns. --help to get a list of all
supported columns.
-p, --pwd
Display information related to login by password (see also
-afL).
-r, --raw
Raw output (no columnation).
-s, --system-accs
Show system accounts. These are by default all accounts with a
UID between 101 and 999 (inclusive), with the exception of
either nobody or nfsnobody (UID 65534). This hardcoded default
may be overridden by the parameters SYS_UID_MIN and
SYS_UID_MAX in the file /etc/login.defs.
--time-format type
Display dates in short, full or iso format. The default is
short, this time format is designed to be space efficient and
human readable.
-u, --user-accs
Show user accounts. These are by default all accounts with a
UID above 1000 (inclusive), with the exception of either
nobody or nfsnobody (UID 65534). This hardcoded default may be
overridden by the parameters UID_MIN and UID_MAX in the file
/etc/login.defs.
-h, --help
Display help text and exit.
-V, --version
Display version and exit.
--wtmp-file path
Alternate path for wtmp.
--lastlog path
Alternate path for lastlog(8).
-y, --shell
The column name will be modified to contain only characters
allowed for shell variable identifiers. This is usable, for
example, with --export. Note that this feature has been
automatically enabled for --export in version 2.37, but due to
compatibility issues, now it’s necessary to request this
behavior by --shell.
-Z, --context
Display the users' security context.
-z, --print0
Delimit user entries with a nul character, instead of a
newline.
0
if OK,
1
if incorrect arguments specified,
2
if a serious error occurs (e.g., a corrupt log).
The default UID thresholds are read from /etc/login.defs.
Password status
Multiple fields describe password status.
"Password is locked"
The password is prefixed by '!!', and the user cannot login
although the password is set or empty. This is common for new
accounts without a set password.
"Password not required (empty)"
The password is not set (hash is missing); this is common for
locked system accounts. Not requiring a password does not mean
the user can log-in without a password. It depends on the
password "lock" status.
"Login by password disabled"
'yes' means that there is no valid password. The password hash
is missing, or the hash method is unknown or contains invalid
chars.
The lslogins utility is inspired by the logins utility, which
first appeared in FreeBSD 4.10.
Ondrej Oprala <ooprala@redhat.com>, Karel Zak <kzak@redhat.com>
group(5), passwd(5), shadow(5), utmp(5)
For bug reports, use the issue tracker
<https://github.com/util-linux/util-linux/issues>.
The lslogins command is part of the util-linux package which can
be downloaded from Linux Kernel Archive
<https://www.kernel.org/pub/linux/utils/util-linux/>. This page is
part of the util-linux (a random collection of Linux utilities)
project. Information about the project can be found at
⟨https://www.kernel.org/pub/linux/utils/util-linux/⟩. If you have a
bug report for this manual page, send it to
util-linux@vger.kernel.org. This page was obtained from the
project's upstream Git repository
⟨git://git.kernel.org/pub/scm/utils/util-linux/util-linux.git⟩ on
2025-08-11. (At that time, the date of the most recent commit that
was found in the repository was 2025-08-05.) If you discover any
rendering problems in this HTML version of the page, or you
believe there is a better or more up-to-date source for the page,
or you have corrections or improvements to the information in this
COLOPHON (which is not part of the original manual page), send a
mail to man-pages@man7.org
util-linux 2.42-start-521-ec46 2025-08-09 LSLOGINS(1)
Pages that refer to this page: utmp(5)