Thanks much to Joe Flecher, and Tyhler Hall for giving
a comfort level. I will however try to persue this
further, possibly with Compaq, since I do not seem to
be able to reproduce it at all!!
If anyone out there can reproduce such entries, please
let me know.
Can't say I ever tried to actually generate the
entries for DTREMOTE.
Once I knew it was CDE doing it and that it occurs
equally on SUN, HP
and
Compaq I stopped worrying about it. I knew none of the
systems had been
hacked.
Never did find anyone who knew what generated the
entry and why. I
recal
noticing a patern in the timestamps which gave me some
kind of a clue
but I can't recall what it was right now.
Hi, i used Xwin32 on different PC's, fired up xdmcp
from them, and it actually logs the right username and
system name of where I am logging from, and not the
dtremote. Where u able to reproduce the entries ??
thanks
--- Joe Fletcher <joe_at_meng.ucl.ac.uk> wrote:
> Hi,
>
> > Got 2 replies, both explaining it is not a
> security
> > issue, this gives me some comfort, what disturbes
> me
> > though, is that I cannot reproduce it!!!
> > It seems to happen "naturally", and checking
> lastcomm
> > around those times shows such things as:
>
> Get an X client PC eXceed or eXcursion or similar
> and fire up XDCMP logins
> on that. I think you'll start seeing DTLOGIN entries
> appearing in last.
>
> Cheers
>
> Joe
>
>
--- Tyler Hall <tyler_h_at_bellsouth.net> wrote:
> This usually means that someone connects to this
> system from another system
> via another Xserver from a pc usually.. IE, Exceed,
> Excursion, ReflectionX,
> etc.. It is not a security breach, but just the way
> those connections show
> up.
>
> Tyler
>
> ----- Original Message -----
> From: "Need Help" <unixtipzz_at_yahoo.com>
> To: <tru64-unix-managers_at_ornl.gov>
> Sent: Monday, October 15, 2001 9:30 AM
> Subject: a summary for this?
>
>
> > Hi,
> > Anyone knows a solution to these postings?
> > No Summaries!
> > I am facing a similar Dilemma
> >
> >
> >
>
http://www.xray.mpe.mpg.de/cgi-bin/w3glimpse/tru64-unix-managers?query=LOGIN
> +dtremote&errors=0&case=on&maxfiles=100&maxlines=30
> >
> >
> >
>
http://www.xray.mpe.mpg.de/mailing-lists/tru64-unix-managers/1999-09/msg0022
> 9.html
> >
> >
> > Hi all,
> > I have searched the archives for any
> summaries
> > on this but have
> > found none. All I can find is questions on this
> > subject. Could some one
> > explain why I might be seeing this type of login
> > information when I use the
> > "last" command. We don't have and account named
> LOGIN
> > and who the heck is
> > dtremote.
> >
> > LOGIN dtremote Wed Jan 12
> > 10:18 still logged in
> > LOGIN dtremote Mon Jan 10
> > 13:26 - 10:17 (1+20:50)
> > LOGIN dtremote Thu Jan 06
> > 12:55 - 13:10 (4+00:14)
> > LOGIN dtremote Thu Jan 06
> > 03:16 - 05:39 (02:22)
> > LOGIN dtremote Thu Jan 06
> > 01:59 - 03:16 (01:16)
> >
> > System Info:
> > DEC Workstation 500au
> > Tru64 version 4.0g
> > WU-ftp version 2.5.0
> >
> >
> >
> > __________________________________________________
> > Do You Yahoo!?
> > Make a great connection at Yahoo! Personals.
> > http://personals.yahoo.com
>
__________________________________________________
Do You Yahoo!?
Make a great connection at Yahoo! Personals.
http://personals.yahoo.com
Received on Mon Oct 15 2001 - 15:50:41 NZDT