get remote user name

[hein coulier]

If i do "who -Htu", i get a list of all user with their remote machine. I'd also like to see their remote account name. Is there a way to accomplish this ?

I tried "last -R", "inetd -l", enabling debug in /etc/pam.conf, but i can't find the trick.

hecou

[Jakes Louw]

Off the top of my head, use "finger".

[hein coulier]

same goes for "finger -R"

[Sanjay Kumar Suri]

Have you used inetd -c to reconfigure the Internet daemon; in other words, force the current inetd to reread /etc/inetd.conf.

inetd only logs the hostnames in the syslog.log. Use last or lastb to check usernames that request Internet services.

sks

[Robert Binkhorst]

Hi,

You could look into identd for this purpose.

"identd operates by looking up specific TCP/IP connections and returning the user name of the process owning the connection."


HTH,

Robert

[RAC_1]

rwho. Check man page of rwho.

Anil

[Sridhar Bhaskarla]

Hi,

The client (telnet|rlogin etc) should pass those details to the server process (telnetd|rlogind etc) in order to obtain that information. So, I don't think you can get it with usual commands. You will need to use the clue 'remote machine' and find out the possible users that could have logged in with 'rwho' 'finger' etc., if those services are enabled.

-Sri

[Sridhar Bhaskarla]

Whoa!! I need to think twice before I post. I take back my 'pass on the details' statement. rlogin obviously does as it uses .rhosts.

-Sri

[Bill Hassell · Accepted solution]

This may be a lot more difficult if you have a variety of user connections. For instance, a Win95 or Win98 user doesn't really login or get authenticated like WinNT/Win2K/WinXP. The PC opsystems do not normally have tools running that allow an external computer to query user names. And Unix tools like finger and identd only work if your local computer has permission to probe the remote user's computer.

As most security specialists will advise: don't turn on fingerd or identd as these services will broadcast important information (ie, user names) to anyone that asks. Hackers love fingerd and identd as it makes their job a lot easier.

[hein coulier]

thanks for the responses. Indeed rwho and others are disabled. Any other suggestions would be appreciated !