User session cant be killed

[nibble]

hi guys,

i got this user who can be seen in "who -u" but cant be killed... how could i kill this user? when i kill his pid from "who -u", it says "no such process" and when i issue ps -ef|grep userA, it cant be seen..

help please

[SS_6]

You may not have root permissions. Try killing it by "kill -9 userpid" You have to be root for this.

[nibble]

im root actually. again, with ps -ef, it cant be seen. but in who -u, it can be seen. aside from nulling /var/adm/wtmp, any other ways?

[Michael Tully]

There is a patch for this. We used to have a lot of trouble before loading it. Please note the special instructions that must be followed. Unfortunately after installing it, your server will need to be rebooted.

PHNE_24829

[Mobeen_1]

Nibble,
Log in as root and use the -9 qualifier to kill. As indicated below

kill -9

regards
Mobeen

[Karthik S S]

ps -uef user_name

kill the PIDs from the o/p of the above command.

-Karthik S S

[Sanjay Kumar Suri]

will the following help?

#fuser -k file_system

sks

[Karthik S S]

I would advise not to use fuser as it might kill other users' processes as well ..

-Karthik S S

[nibble]

guys, thanks so much for your help, but we're getting farhter here. to clarify, heres the scene

# who -u |grep userA
userA pts/the Mar 15 11:17 18:58 7040 10.0.0.25

# kill -9 7040
kill: 7040: no such process

# ps -ef|grep userA
root 1768 28173 2 13:04:23 pts/tae 0:00 grep userA <--my search is only seen. the actualy login is not seen

# finger userA
Login name: userA (messages off) In real life:
Bldg:
Directory: Shell: /usr/bin/ksh
On since Mar 15 11:17:59 on pts/the from 10.0.0.25
19 hours Idle Time

i know 1 option is to null /var/adm/wtmp or /etc/utmp or reboot the machine. now, i dont want to truncate the entry of /var/adm/wtmp for audit purposes, much more rebooting the machine cns its prd.

any other ways?

[Shaikh Imran · Accepted solution]

Hi,
If you know the tty of the user's process then you can use fuser -k on that particular tty.

Regards,