topic Re: remote login in Operating System - HP-UX

remote login

haeman — Tue, 29 Apr 2008 03:07:02 GMT

I have a two unix server ( serverA and serverB ) , I checked that a login in serverA ( who -u |grep pts/30) , this pts is from serverB (by telnet) , if I want to know which user (IP address) in serverB use the login ID "ora_usr" to login serverA , what can i do ? thx

serverA
======
#who -u |grep pts/30
ora_usr pts/30 Apr 29 11:45 serverB

Re: remote login

Ramesh S — Tue, 29 Apr 2008 03:27:17 GMT

Hi

"ora_usr" from serverB has logged in serverA.

Oracle must be using the "ora_usr" id. Have a look on /etc/passwd file.

Best Regards,
Ramesh

Re: remote login

Jeeshan — Tue, 29 Apr 2008 03:28:47 GMT

#who -a|grep

Re: remote login

haeman — Tue, 29 Apr 2008 03:51:31 GMT

thx replies,

ora_usr is common user , so I don't know which user use this login at the time .

thx

Re: remote login

Ramesh S — Tue, 29 Apr 2008 04:01:03 GMT

HI

In that case, do "last -R" to know the IP address from that user logged in.

Best Regards,
Ramesh

Re: remote login

haeman — Tue, 29 Apr 2008 04:21:05 GMT

thx Ramesh S

I think the last -R in serverB only show who is logging in serverB , but can't show who is using telnet to connect serverA , for example , there are 10 user use ora_usr to telnet to serverA , how do I know who is who ? thx

Re: remote login

Ramesh S — Tue, 29 Apr 2008 04:40:24 GMT

Hi

I guess, You can only see the IP address/system name only from where user id 'ora_usr' logged in.

Best Regards,
Ramesh

Re: remote login

OFC_EDM — Tue, 29 Apr 2008 05:33:52 GMT

Unfortunately I don't have lsof on my system so I can't check.

But lsof which lists open files "might" have information to help find out who has a telnet session open.

lsof gives an understanding of the relationship of processes to open files descriptor and sockets and much more.

May be worth a shot looking at it.

If I get a chance I'll install it and see if it will be of any use.

Re: remote login

OFC_EDM — Tue, 29 Apr 2008 05:38:01 GMT

I did find this post from someone who was trying to find the IP on the other end of a Telnet session.

"On Unix one may use 'lsof' (if available) and grep on the shell pid and
file descriptor 0 to find the line containing the source ip addr. In
some flavors of Unix the /proc filesystem can also be of help."

Sounds like lsof may be of help after all.

Re: remote login

OFC_EDM — Tue, 29 Apr 2008 05:40:05 GMT

or try

who -mu

That command showed my machine name including domain for my ssh session.

Which I then used nslookup to get the IP.

I think it would work for telnet too.

Re: remote login

haeman — Tue, 29 Apr 2008 07:13:04 GMT

thx reply ,

the lsof can show the remote IP , but how to know which user ( from 10 of them ) is this login session ?

for nslookup , you mean run it at serverB ? I tried to use nsloopup IP but not work, can advise how to use it ? thx

#man nslookup
nslookup -query=hinfo -timeout=10