topic Re: Prevent wtmp entry for ftp logins for specific users in Operating System - HP-UX

Prevent wtmp entry for ftp logins for specific users

Rodney Hills — Mon, 19 Nov 2001 19:00:30 GMT

I have a NT server that is running an application that polls our HPUX 10.20 box for XML files to be sent to our vendors. The polling is done via ftp every 10 minutes.

I noticed that my wtmp file is growing with each ftp login.

My question is-
Can I prevent these ftp login entries from being put into wtmp in the first place for a specific user?

Re: Prevent wtmp entry for ftp logins for specific users

harry d brown jr — Mon, 19 Nov 2001 19:09:49 GMT

You can't turn it off for certain users. Why not "push" the files from your HP box to your NT when the files are ready on your HP box? This reduces a lot of overhead. You could also look at using samba on your HPux server, and place the files into the directory that your NT is looking at.

live free or die
harry

Re: Prevent wtmp entry for ftp logins for specific users

Craig Rants — Mon, 19 Nov 2001 19:27:45 GMT

Rodney,
wtmp is independent from the files that log to it, so it is not like you can just edit a config file. If you are concerned about the size of wtmp, do some automated archiving in cron, something like...

cp wtmp wtmp.$DATE
cat /dev/null > wtmp
gzip wtmp.$DATE

Good Luck,
C

Re: Prevent wtmp entry for ftp logins for specific users

Rodney Hills — Mon, 19 Nov 2001 19:35:09 GMT

Modifying the application to push the data would require a rewrite of the vendors software.

Originally I thought about samba, but I would have to add some customization to the application on the HPUX side. Each line would need a ^M on the end to make them "DOS"ish. Using ftp did it automatically .

I was trying to avoid modifying the system supplied by our software vendor, but it looks like I can't get away from it.

Thanks for the reply...

-- Rod Hills

Re: Prevent wtmp entry for ftp logins for specific users

someone_4 — Mon, 19 Nov 2001 19:42:12 GMT

Im not too sure about this but what if you edit your /etc/inittab file?
Now from reading you have a line
init:3:initdefault:
with 3 being the run level. What if you bring it down to 2 ? Maybe this will slow down the logging. Not sure though just a thought. Here are some links

http://docs.hp.com/hpux/onlinedocs/B2355-90682/B2355-90682.html

http://us-support.external.hp.com/cki/bin/doc.pl/sid=8bbcc35e0fe3bc6ca7/screen=ckiDisplayDocument?docId=200000040986508

http://us-support.external.hp.com/cki/bin/doc.pl/sid=9851c9ae08ae1d5eba/screen=ckiDisplayDocument?docId=200000024631917