find inactive accounts

[Steve Glasser]

Hi list,

For PCI reasons I have to report all accounts which have been inactive
(i.e. no logins) for three months.  The goal here is to automate the
process...

I know I can get users and login dates from krb5kdc.log, and I can
find the last login date.  However Kerberos logs dates as "month day",
so to do date math for dates going back into last year is awkward at
best.  So...

a) can I configure Kerberos to log "month day year"?
b) is there a better way to do this audit?

Thanks,

-- 
Steve Glasser
sgla9347 at gmail.com