Error in hp Secure shell

[Avinash Agarkar]

Hi,

I have installed 11.31 installed on of my box have also the latest hp secure

Secure_Shell A.05.10.008 HP-UX Secure Shell

but when the wtmps file is full the ssh connection will be getting very very slow any one have any idea.

Thanks,
Avinash

[Suraj K Sankari]

Hi Avinash,

I don't think there is any connection between ssh shell and wtmp, The only connection is if the user is login successfully then one entry will be there in wtmp, better you check some other things.
One more things there is no limit for wtmp how you judge that wtmp file is getting full?


Suraj

[Matti_Kurkela]

The man page for wtmps says:
"Note that wtmps and btmps tend to grow without bound, and should be checked regularly. Information that is no longer useful should be removed periodically to prevent the file from becoming too large.

Also note that wtmps and btmps are not created by the programs that maintain them. Thus, if these files are removed, login record-keeping is turned off."

Managing the system log files (including the wtmps file) is a part of normal maintenance tasks for any Unix sysadmin. Of course, it can be automated if you wish.

The simplest way would be to set up a cron job to copy the current wtmps file to archive location and then truncate the original file to zero size. The archived files can then be compressed with gzip for long-term storage, or simply deleted when they are old enough.

Find out your site's data retention policies: how long should information about old logins be stored? Four weeks, a number of months, or a number of years?
And how fast does the wtmps file grow in your system?

Then write a script and set it up as a cron job so that the current wtmps file is truncated often enough to keep its size manageable, and the archive location will hold the correct amount of older versions of the file to comply with your site policy.

Make this a part of your standard procedure for setting up a new machine.

If someone needs to read the older login information, he/she can use the "-f" option of the "last" command to look into one of the archived files instead of the current wtmps file.

MK

[Avinash Agarkar]

.