The question was why phantom entries with the date 'Jan 1 01:00' appear
when rwho is used.
Thanks to Olle Eriksson who pointed out that an SSH compiled for 4.x
doesn't obay the new format of lastlog, wtmp and utmp in version 5.x.
Tobias
The question was:
> we get a very odd result with rwho on 5.1.
> After a while there are several
> user comp: Jan 1 01:00
> entries. Note the date "Jan 1 01:00" is always the same.
>
> This entry persists for several hours after loggout.
>
> If I login on a 5.1 computer (ssh in this case) and run rwho I see
> user comp: Jan 1 01:00
> user comp:pts/1 Jan 3 14:28 :08
> (the 'wrong' date entry is shifted one to the left)
>
> This doesn't happen with 4.0 (rwhod).
> (The result of `rwho` is the same on 4.0, 5.1 and FreeBSD.)
Received on Wed Jan 03 2001 - 14:15:57 NZDT