wrong entry in su log

[bhavin asokan]

hi,

when i am doing su from a user to another user it is giving wrong entry in sulog.in the following part of sulog when i did the su from bhavin to root it gave cdas-root & when i did from prasad to ora8i it gave mock-ora8i.sometimes the entries are coming O.K.

i am directly logging as bhavin/prasad and then using su.

i purged the utmp ,wtmp files also.but same problem existing.



Sep 25 17:53:19 prod2 su: + ta mock-ora8i
Sep 25 17:54:50 prod2 su: + tc cdas-root
Sep 25 21:31:38 prod2 su: + tc mock-ora8i
Sep 27 07:17:35 prod2 su: + tc mock-ora8i
Sep 27 09:46:11 prod2 su: + tg hp-root
Sep 27 11:51:09 prod2 su: +

regds,

[Jeff_Traigle]

Sounds like duplicate UIDs defined for the users. Check /etc/passwd.

[Jeff Schussele · Accepted solution]

Hi bhavin,

I suspect the problem lies in the /etc/utmpx file & may be caused be a problem with the telnetd daemon. Take a look at PHNE_24829 & be *sure* to follow the special instructions when you apply it.

HTH,
Jeff

[Peter Leddy_1]

Hi,

Check this thread, Jeff Schussele mentions a patch that could resolve this issue.

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=234481

HTH,

Peter

[Peter Leddy_1]

Sorry about repeating the same thing Jeff, you got in before I could cut & paste.

[bhavin asokan]

thanks,

i have to try it in our prodn server

regds,