topic Re: How to find out the logins in Operating System - HP-UX

How to find out the logins

Suni Raj — Mon, 03 Oct 2005 07:13:49 GMT

Hi...

Someone(obviously with preveliged user) restarted the Sybase DB on my HP-UX 11.0 box. How can I find that who has done this or who was logged on to the server at a particular time.

Can anybody help me out in this regard.

Regds
Suni

Re: How to find out the logins

Muthukumar_5 — Mon, 03 Oct 2005 07:14:52 GMT

last -R

will give it.

hth.

Re: How to find out the logins

Pete Randall — Mon, 03 Oct 2005 07:15:21 GMT

The last command will give you login info.

Pete

Re: How to find out the logins

RAC_1 — Mon, 03 Oct 2005 07:15:32 GMT

last -R - successful logins
lastb -R - invalid logins

Re: How to find out the logins

Arunvijai_4 — Mon, 03 Oct 2005 07:17:09 GMT

# last will be helpful. Use # last -R to get user's hostname.

-Arun

Re: How to find out the logins

Rita C Workman — Mon, 03 Oct 2005 07:21:44 GMT

last will tell who logged in and when.
But you need to take note who may still have been logged in at that time.

Suppose depending on your environment, and depending on how many folks have access to stop/start DB's, your going to have to narrow down who it 'could have been'.

Rgrds,
Rita

Re: How to find out the logins

Borislav Perkov — Mon, 03 Oct 2005 07:22:56 GMT

Hi Suni,

#last -R
and you will find who was logged but also look in /var/adm/sulog to see if he used the su command to user who is able to restart the Sysbase DB,

Regards,
Borislav

Re: How to find out the logins

Morcos — Mon, 03 Oct 2005 07:23:29 GMT

last will be helpful in this case.

/var/adm/wtmp : login database.

Hope this helps

Ziad

Re: How to find out the logins

Muthukumar_5 — Mon, 03 Oct 2005 07:24:05 GMT

Another way is simply (if you enabled history file) then,

cd /home
for file in `find . -type f -name "*history*"`
do
grep 'sybase-stop related string' $file
done

hth.