<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 5.5.2653.12">
<TITLE>RE: [NTLUG:Discuss] ssh login</TITLE>
</HEAD>
<BODY>
<P><FONT SIZE=2>so do you have a solution as to how to fix the problem? The first and only suggestion did not work.</FONT>
</P>
<P><FONT SIZE=2>T.J. Davis</FONT>
<BR><FONT SIZE=2>Southwestern A/G University</FONT>
<BR><FONT SIZE=2>Information Technology</FONT>
<BR><FONT SIZE=2>tjdavis@sagu.edu</FONT>
<BR><FONT SIZE=2>(972) 937-4010 ext. 1255</FONT>
<BR><FONT SIZE=2>1 Timothy 4:12</FONT>
</P>
<BR>
<BR>
<P><FONT SIZE=2>-----Original Message-----</FONT>
<BR><FONT SIZE=2>From: MadHat [<A HREF="mailto:madhat@unspecific.com">mailto:madhat@unspecific.com</A>]</FONT>
<BR><FONT SIZE=2>Sent: Wednesday, August 07, 2002 3:18 AM</FONT>
<BR><FONT SIZE=2>To: NTLUG-Discuss</FONT>
<BR><FONT SIZE=2>Subject: Re: [NTLUG:Discuss] ssh login</FONT>
</P>
<BR>
<P><FONT SIZE=2>On Tue, 2002-08-06 at 06:47, Greg Edwards wrote:</FONT>
<BR><FONT SIZE=2>> I've seen this on my machines as well. I've even seen the login stay </FONT>
<BR><FONT SIZE=2>> registered after a reboot. Never did try to figure it out.</FONT>
</P>
<P><FONT SIZE=2>This was actually answered, but just to make sure... when you log into</FONT>
<BR><FONT SIZE=2>a box, it makes an entry into the /var/run/utmp (may be different on</FONT>
<BR><FONT SIZE=2>different distributions). When you log out, another entry is made. If</FONT>
<BR><FONT SIZE=2>you do not log out, but lose your connection, this will cause the logout</FONT>
<BR><FONT SIZE=2>entry to be not registered. Also you can have your shell still running</FONT>
<BR><FONT SIZE=2>at times, if it did not receive the proper signal. This can also</FONT>
<BR><FONT SIZE=2>traverse reboots since the logout entry will still not exist (not the</FONT>
<BR><FONT SIZE=2>shell still running). </FONT>
</P>
<P><FONT SIZE=2>utmp (and wtmp, the backup usually located in /var/log) contain info</FONT>
<BR><FONT SIZE=2>also used by the 'last' command to say when people were logged in and</FONT>
<BR><FONT SIZE=2>how long they were on and other bits of info like when the machine was</FONT>
<BR><FONT SIZE=2>rebooted (and the kernel version often). I prefer 'w 'to 'who', as it</FONT>
<BR><FONT SIZE=2>adds some more info about the idle time and what they are running by</FONT>
<BR><FONT SIZE=2>default, but it still relies on the utmp file.</FONT>
</P>
<P><FONT SIZE=2>> </FONT>
<BR><FONT SIZE=2>> TJ Davis wrote:</FONT>
<BR><FONT SIZE=2>> </FONT>
<BR><FONT SIZE=2>> > command prompt. To test this I logged into ssh remotely as "tjdavis" </FONT>
<BR><FONT SIZE=2>> > and killed the daemon while logged in. I went into the server room and </FONT>
<BR><FONT SIZE=2>> > typed "who" and sure enough it shows tjdavis to still be logged in. </FONT>
<BR><FONT SIZE=2>> > Anyone know how to fix this. I hope I made sense. If you need </FONT>
<BR><FONT SIZE=2>> > clarification let me know.</FONT>
<BR><FONT SIZE=2>> > </FONT>
<BR><FONT SIZE=2>> > T.J. Davis</FONT>
<BR><FONT SIZE=2>> </FONT>
<BR><FONT SIZE=2>> </FONT>
<BR><FONT SIZE=2>> -- </FONT>
<BR><FONT SIZE=2>> Greg Edwards</FONT>
<BR><FONT SIZE=2>> New Age Software, Inc.</FONT>
<BR><FONT SIZE=2>> <A HREF="http://www.nas-inet.com" TARGET="_blank">http://www.nas-inet.com</A></FONT>
<BR><FONT SIZE=2>> </FONT>
<BR><FONT SIZE=2>> </FONT>
<BR><FONT SIZE=2>> _______________________________________________</FONT>
<BR><FONT SIZE=2>> <A HREF="http://www.ntlug.org/mailman/listinfo/discuss" TARGET="_blank">http://www.ntlug.org/mailman/listinfo/discuss</A></FONT>
<BR><FONT SIZE=2>> </FONT>
<BR><FONT SIZE=2>-- </FONT>
<BR><FONT SIZE=2>MadHat at Unspecific.com</FONT>
<BR><FONT SIZE=2>"Anyone who understands Linux/Unix, really understands the universe.</FONT>
<BR><FONT SIZE=2> Anyone who understands Windows, really understands Windows."</FONT>
<BR><FONT SIZE=2> - Richard Thieme, DefCon 10, 2002 </FONT>
</P>
<P><FONT SIZE=2>_______________________________________________</FONT>
<BR><FONT SIZE=2><A HREF="http://www.ntlug.org/mailman/listinfo/discuss" TARGET="_blank">http://www.ntlug.org/mailman/listinfo/discuss</A></FONT>
</P>
</BODY>
</HTML>