topic Re: User session cant be killed in Operating System - HP-UX

User session cant be killed

nibble — Mon, 15 Mar 2004 21:28:45 GMT

hi guys,

i got this user who can be seen in "who -u" but cant be killed... how could i kill this user? when i kill his pid from "who -u", it says "no such process" and when i issue ps -ef|grep userA, it cant be seen..

help please

Re: User session cant be killed

SS_6 — Mon, 15 Mar 2004 21:41:37 GMT

You may not have root permissions. Try killing it by "kill -9 userpid" You have to be root for this.

Re: User session cant be killed

nibble — Mon, 15 Mar 2004 21:54:32 GMT

im root actually. again, with ps -ef, it cant be seen. but in who -u, it can be seen. aside from nulling /var/adm/wtmp, any other ways?

Re: User session cant be killed

Michael Tully — Mon, 15 Mar 2004 22:05:25 GMT

There is a patch for this. We used to have a lot of trouble before loading it. Please note the special instructions that must be followed. Unfortunately after installing it, your server will need to be rebooted.

PHNE_24829

Re: User session cant be killed

Mobeen_1 — Mon, 15 Mar 2004 23:56:30 GMT

Nibble,
Log in as root and use the -9 qualifier to kill. As indicated below

kill -9

regards
Mobeen

Re: User session cant be killed

Karthik S S — Tue, 16 Mar 2004 00:04:01 GMT

ps -uef user_name

kill the PIDs from the o/p of the above command.

-Karthik S S

Re: User session cant be killed

Sanjay Kumar Suri — Tue, 16 Mar 2004 00:06:33 GMT

will the following help?

#fuser -k file_system

sks

Re: User session cant be killed

Karthik S S — Tue, 16 Mar 2004 00:10:50 GMT

I would advise not to use fuser as it might kill other users' processes as well ..

-Karthik S S

Re: User session cant be killed

nibble — Tue, 16 Mar 2004 00:19:04 GMT

guys, thanks so much for your help, but we're getting farhter here. to clarify, heres the scene

# who -u |grep userA
userA pts/the Mar 15 11:17 18:58 7040 10.0.0.25

# kill -9 7040
kill: 7040: no such process

# ps -ef|grep userA
root 1768 28173 2 13:04:23 pts/tae 0:00 grep userA <--my search is only seen. the actualy login is not seen

# finger userA
Login name: userA (messages off) In real life:
Bldg:
Directory: Shell: /usr/bin/ksh
On since Mar 15 11:17:59 on pts/the from 10.0.0.25
19 hours Idle Time

i know 1 option is to null /var/adm/wtmp or /etc/utmp or reboot the machine. now, i dont want to truncate the entry of /var/adm/wtmp for audit purposes, much more rebooting the machine cns its prd.

any other ways?

Re: User session cant be killed

Shaikh Imran — Tue, 16 Mar 2004 00:39:25 GMT

Hi,
If you know the tty of the user's process then you can use fuser -k on that particular tty.

Regards,

Re: User session cant be killed

nibble — Tue, 16 Mar 2004 00:46:20 GMT

tnx shaik... =)

Re: User session cant be killed

hien — Tue, 16 Mar 2004 00:53:37 GMT

fuser -k to the tty device from who -u command

Re: User session cant be killed

hien — Tue, 16 Mar 2004 00:57:20 GMT

thanks rovercm

Re: User session cant be killed

Karthik S S — Tue, 16 Mar 2004 00:59:11 GMT

didn't you try "ps -uef userA"

it will list you the processes that are spawned by userA and you can kill them all.

-Karthik S S