As has been posted, /var/log/lastlog is the file in which to look for
the last login time for users.  The popular reply "last", or "use wtmp"
isn't a good answer because those log files get turned over and eventually
removed.

-j