[SunHELP] last command not working (topo's corrected)
Predrag Zecevic - Solaris System Administrator
predrag.zecevic at 2e-systems.com
Fri Oct 29 02:46:44 CDT 2004
Another stupid proposal:
check clock settings there and *if* PROM batery operates at all...
Does last command shows same date/time data every time? Or those are
> Lund, Dennis wrote:
>> We have and issue were the "last" command is NOT displaying accurate
>> The command only displays login data from May 2004.
>> The wtmpx file is updating when a user logs into the server, but
>> logins from
>> May 31st and earlier are the only logins displayed.
>> wallacc pts/14 xxx.xxx.xxx.xxx Mon May 31 15:20 - 15:29
>> perryc pts/14 xxx.xxx.xxx.xxx Mon May 31 11:37 - 11:43
>> perryc pts/14 xxx.xxx.xxx.xxx Mon May 31 08:58 - 10:57
>> I have run a few tests on another system:
>> 1. cat /dev/null wtmpx (last still works showing login data)
>> 2. cat /dev/null utmpx (last still works)
>> 3. cat /dev/null lastlog (last still works)
> Telnet or ssh to the machine, on the system, truss the login process
> to see if it attempts to log the session and gives an error.
> It is also a typical scenario after an intruder rooted the machine.
> Check inetd.conf to see what options are set when telnetd/sshd is
> SunHELP maillist - SunHELP at sunhelp.org
| Predrag Zecevic | e-Mail: Predrag.Zecevic at 2e-Systems.COM |
| 2e Systems GmbH | Tel: (+49)6107 989 415 |
|Im Taubengrund 12| Fax: (+49)6107 989 494 |
|65451 Kelsterbach| |
| Germany | Cellular: (+49)174 3109 288 |
It is easier to make a saint out of a libertine than out of a prig. -- George Santayana
More information about the SunHELP