Difference in last successful login time stamp value in trusted & non-trusted mode on HP-UX 11.i sys

[Abdul Latif Curtay]

I have observed that the value of last successful login time stamp is different in trusted & non-trusted mode in HP-UX. I have created an account on my HP-UX 11.11 system & the time stamp values that I get in trusted mode is 1202423402 & in non-trusted mode is 1199755848. Similar behavious has also been observed on HP-UX 11.23 ia64 systems. Can some one explain me this difference.

[Dennis Handly]

Well the two times are about a month apart:
1202423402
time_t value is: 02/07/08 14:30:02 PST
1199755848
time_t value is: 01/07/08 17:30:48 PST

[Abdul Latif Curtay]

Your reply did not answer my question. What I would like to know is why am I getting 2 different values for last successful login time stamp for the same user account in trusted & non-trusted mode. The value for the trusted mode, I have retrieved it from /tcb/files/auth/l/ file and in non-trusted mode I have received it from /var/adm/wtmp file. Why is there an ambiguity.

[Wouter Jagers]

Dennis' post might be a lead, though, no ? Only you can know if these dates mean anything in particular.

The system could for example have been converted to trusted mode between jan.7th and feb.7th ?

A little test could be useful, should there be a 'spare' machine around.

Good luck, let us know what you find out ;-)

Cheers,
Wout

[Andrew Merritt_2]

> The value for the trusted mode, I have retrieved it from /tcb/files/auth/l/ file and in non-trusted mode I have received it from /var/adm/wtmp file. Why is there an ambiguity.

I think you've answered your own question.
Once you have converted it to trusted mode, why would the untrusted mode file be updated anymore?

What's the last modification date on the /var/adm/wtmp file?

Andrew

[Dennis Handly]

>Andrew: why would the untrusted mode file be updated anymore?

Are the utmp* files only for untrusted?

>What's the last modification date on the /var/adm/wtmp file?

What about wtmps and wtmpx?