finger command

[Jose Mosquera]

Pls could you certify me that when finger command output show me "Never logged in." this really means it or the command is supported in any other system log file like "last" and "lastb" commands?

Regards

[Stefan Farrelly · Accepted solution]

finger only relies on /etc/utmp and /var/adm/wtmp which means if these files get zeroed or removed then finger will say the user has never logged on - when in fact they have - just that the recorded info of their last login has been deleted.

[Steve Steel]

Hi

From man finger

FILES
/etc/utmp who file
/var/adm/wtmp last login file
/etc/passwd for users names, offices, ...
~/.plan plans
~/.project projects
/var/mail mail directory

Never logged in means since the last reboot.

The user is not in wtmp

Steve Steel