topic Re: RH Linux Logon user history in Operating System - Linux

RH Linux Logon user history

Gary L — Mon, 15 Oct 2007 11:11:12 GMT

Hi there

My manager gave me a task: create a daily report of all logon/logoff user list and send to him. The requirements let me list in whole day, all users who once logon and logoff the system, list their time and terminals.

As we know, the command ' who or who -u ' only list at that time, the current system users. If someone already log out, it doesn’t be listed at that time. It is Not a whole day information.

Would you please kindly tell me how to do it. Any answers will be very appreciated. If someone already have corresponding script, that's good for reference.

Re: RH Linux Logon user history

Gary L — Mon, 15 Oct 2007 13:12:10 GMT

In other words:
I wanna list all the users who once logon the system in one day. Include, time and terminal informations.
Who could help me?

Re: RH Linux Logon user history

James R. Ferguson — Mon, 15 Oct 2007 13:31:32 GMT

Hi Gary:

Have a look at the 'last' command. See your friendly manpages for details.

Regards!

...JRF...

Re: RH Linux Logon user history

Gary L — Mon, 15 Oct 2007 13:33:40 GMT

Hi James

Thank you very much for your fast reply. I will check " last " soon.

Re: RH Linux Logon user history

Ivan Ferreira — Mon, 15 Oct 2007 14:26:51 GMT

You should also check the "ac" command, please see man "ac", for example "ac -p".

Re: RH Linux Logon user history

Gary L — Mon, 15 Oct 2007 14:34:20 GMT

Hi Ivan

Thank you very much for your "ac -p" suggestion.
I think, "last -a " pretty match my requirements. It include: username, tty, logon time, logout time and from which terminal etc more informations.
So, I have been writting the script base on the command last -a.
But anyway, thanks again for your kindly help

-Gary

Re: RH Linux Logon user history

Ivan Ferreira — Mon, 15 Oct 2007 15:20:58 GMT

Hi Gary, I think that another thing that you should report is the "failed login attempts", this is not displayed with last or ac.

Please see this link:

http://www.redhatmagazine.com/2007/02/20/how-do-i-use-the-faillog-program-to-track-failed-login-attempts/

Re: RH Linux Logon user history

Gary L — Mon, 15 Oct 2007 15:30:00 GMT

Thanks Ivan

The informations of failed login attempts is very usful to the report, I will add it into script.

thanks again

-Gary