[SunHELP] last command not working (topo's corrected)

[Predrag Zecevic - Solaris System Administrator]

Hi,

Another stupid proposal:

    check clock settings there and *if* PROM batery operates at all...

Does last command shows same date/time data every time? Or those are 
different?
Regards ;-)

Fabio wrote:

> Lund, Dennis wrote:
>
>> We have and issue were the "last" command is NOT displaying accurate 
>> data.
>> The command only displays login data from May 2004.
>>
>> The wtmpx file is updating when a user logs into the server, but 
>> logins from
>> May 31st and earlier are the only logins displayed.
>>
>> Example:
>>
>> wallacc   pts/14       xxx.xxx.xxx.xxx    Mon May 31 15:20 - 15:29  
>> (00:08)
>> perryc    pts/14       xxx.xxx.xxx.xxx    Mon May 31 11:37 - 11:43  
>> (00:06)
>> perryc    pts/14       xxx.xxx.xxx.xxx    Mon May 31 08:58 - 10:57  
>> (01:58)
>> I have run a few tests on another system:
>>
>> 1. cat /dev/null wtmpx (last still works showing login data)
>> 2. cat /dev/null utmpx (last still works)
>> 3. cat /dev/null lastlog (last still works)
>>
>>  
>>
> Telnet or ssh to the machine, on the system, truss the login process 
> to see if it attempts to log the session and gives an error.
>
> It is also a typical scenario after an intruder rooted the machine.
>
> Check inetd.conf to see what options are set when telnetd/sshd is 
> executed.
>
> ebar.
> _______________________________________________
> SunHELP maillist  -  SunHELP at sunhelp.org
> http://www.sunhelp.org/mailman/listinfo/sunhelp


-- 
| Predrag Zecevic | e-Mail: Predrag.Zecevic at 2e-Systems.COM |
| 2e Systems GmbH |              Tel: (+49)[0]6107 989 415 |
|Im Taubengrund 12|              Fax: (+49)[0]6107 989 494 |
|65451 Kelsterbach|                                        |
|     Germany     |         Cellular: (+49)[0]174 3109 288 |
+=================+
It is easier to make a saint out of a libertine than out of a prig. -- George Santayana