Question - password shadow reconciliation

Hi Guys/Ladies;

A question - In an environment with 1000+ Solaris hosts, I've determined
that through patching, etc., quite a few accounts have been duplicated.

A good example is 'smmsp' which may appear 2 or 3 times on about 60% of
servers. Other accounts are involved as well. In all cases they are Solaris
system accounts or special ID's. I don't see anything nefarious going on
here - Shadow duplication of the account occurs also, but if an account is
locked, the duplicate is also locked. UIDs always remain consistent.

Has anyone ever created a script with the logic to remove the duplicates
(while leaving one entry correctly) ?

If you have and would be willing to share I'd really appreciate it.

Thanks,


Drew.