Operating System - HP-UX
1826399 Members
4511 Online
109692 Solutions
New Discussion

Re: Incorrect user ids being logged in SU log file

 
Managed Services
Frequent Advisor

Incorrect user ids being logged in SU log file

Whenever I use the SU command as my own adminstration login, the appears in the SU log file as a totally separate user id. If I log in later, another different user id may appear as myself, or the same login id may appear as earlier. My own login id does not appear.
Does anyone know why this may be??
3 REPLIES 3
T G Manikandan
Honored Contributor

Re: Incorrect user ids being logged in SU log file

Michael Steele_2
Honored Contributor

Re: Incorrect user ids being logged in SU log file

Usually this is related to /etc/utmp and wtmp. Verify corruption with these commands:

# last account
# finger account

Remove corruption :

# cat /dev/null > /etc/utmp
# cat /dev/null > /etc/wtmp

NOTE: Never >/etc/utmp. Althought this zeros out the file it doesn't remove the corruption.
Support Fatherhood - Stop Family Law
Jeff Schussele
Honored Contributor

Re: Incorrect user ids being logged in SU log file

Hi,

This is the classic symptom of utmp/utmpx corruption. There is a patch - PHNE_24829:

http://www2.itrc.hp.com/service/patch/patchDetail.do?patchid=PHNE_24829&context=hpux:800:11:11

that addresses the telnetd caused corruption.
We had the same problem & this patch fixed the problem.
NOTE that there are special instructions on this patch that *must* be followed for the fix to work.

HTH,
Jeff
PERSEVERANCE -- Remember, whatever does not kill you only makes you stronger!