Hi Gurus,
Thanks to Nick Hill and to Jim Belonis. Jim suggests that /etc/wtmp or
/etc/utmp are corrupted; I do not think so, since the problem in all
three boxes we have upgraded to Tru64 5.0a. Nick suggests the problem
should be caused by sshd compiled with DU 3.2:
> I have seen something along these lines with systems with sshd running. If
> you use ssh on your system then you must use a version compiled on a 5.0
> system. While a version of ssh compiled on a V4 system will work, with V5
> there was a change in the utmp and lastlog structures which affect the
> format of the utmp, wtmp and lastlog files meaning a V4 compiled sshd puts
> entries in these files with an incorrect format. This results in the w
> command displaying odd info.
In fact we had ssh1d and ssh2d, compiled with the old system, running.
We have recompiled under 5.0a but nothing has changed with respect
to our problem. Any other suggestions are welcome.
Oyanarte Portilho
Institute of Physics
University of Brasilia, Brazil
----- Original posting:
> Sorry if this is a FAQ. After upgrading to Tru64 5.0a + enhanced
> security, command "w" does not show all logged users correctly.
> Also, "last" shows a bunch of lines like
>
> username ^G Wed Dec 31 21:00 still logged in
>
> as if those users were still logged in since 9 pm of Dec 31. Is this
> a new security feature or what?
Received on Sat Oct 14 2000 - 19:02:04 NZDT