topic Re: get remote user name in Operating System - HP-UX

get remote user name

hein coulier — Thu, 04 Mar 2004 05:07:16 GMT

If i do "who -Htu", i get a list of all user with their remote machine. I'd also like to see their remote account name. Is there a way to accomplish this ?

I tried "last -R", "inetd -l", enabling debug in /etc/pam.conf, but i can't find the trick.

hecou

Re: get remote user name

Jakes Louw — Thu, 04 Mar 2004 05:09:25 GMT

Off the top of my head, use "finger".

Re: get remote user name

hein coulier — Thu, 04 Mar 2004 05:11:18 GMT

same goes for "finger -R"

Re: get remote user name

Sanjay Kumar Suri — Thu, 04 Mar 2004 05:20:25 GMT

Have you used inetd -c to reconfigure the Internet daemon; in other words, force the current inetd to reread /etc/inetd.conf.

inetd only logs the hostnames in the syslog.log. Use last or lastb to check usernames that request Internet services.

sks

Re: get remote user name

Robert Binkhorst — Thu, 04 Mar 2004 06:59:03 GMT

Hi,

You could look into identd for this purpose.

"identd operates by looking up specific TCP/IP connections and returning the user name of the process owning the connection."

HTH,

Robert

Re: get remote user name

RAC_1 — Thu, 04 Mar 2004 08:00:22 GMT

rwho. Check man page of rwho.

Anil

Re: get remote user name

Sridhar Bhaskarla — Thu, 04 Mar 2004 09:11:00 GMT

Hi,

The client (telnet|rlogin etc) should pass those details to the server process (telnetd|rlogind etc) in order to obtain that information. So, I don't think you can get it with usual commands. You will need to use the clue 'remote machine' and find out the possible users that could have logged in with 'rwho' 'finger' etc., if those services are enabled.

-Sri

Re: get remote user name

Sridhar Bhaskarla — Thu, 04 Mar 2004 09:19:02 GMT

Whoa!! I need to think twice before I post. I take back my 'pass on the details' statement. rlogin obviously does as it uses .rhosts.

-Sri

Re: get remote user name

Bill Hassell — Thu, 04 Mar 2004 09:24:10 GMT

This may be a lot more difficult if you have a variety of user connections. For instance, a Win95 or Win98 user doesn't really login or get authenticated like WinNT/Win2K/WinXP. The PC opsystems do not normally have tools running that allow an external computer to query user names. And Unix tools like finger and identd only work if your local computer has permission to probe the remote user's computer.

As most security specialists will advise: don't turn on fingerd or identd as these services will broadcast important information (ie, user names) to anyone that asks. Hackers love fingerd and identd as it makes their job a lot easier.

Re: get remote user name

hein coulier — Mon, 08 Mar 2004 05:42:08 GMT

thanks for the responses. Indeed rwho and others are disabled. Any other suggestions would be appreciated !