Not able to kill the logins

[sanalp]

i am facing a problem of not able to kill the users who have not logged out properly .they have logged in long days back and when i use the command who its showing users and PID but while killing its showing proces doesnt exists.if we reboot or change the security policy to allow more than three login it will work out.but i heard that if we edit wtmp then its possible could any one help me in this case.....
thanks in advance...

[Dennis Handly · Accepted solution]

>kill the users who have not logged out properly .they have logged in long days back and when i use the command who

These users aren't logged in, if utmps is corrupted, then who(1) will lie to you.

>heard that if we edit wtmp then its possible

You can just reset the file with "> /var/adm/wtmps".
If you want to save the date, you have to edit it after using fwtmp(1M).

[Jeeshan]

Hi

You can see which users still login with PID using
#who -u

But it happens when a user logout unexpectedly or don't logout using exit command. then the user's login histry you see in who -a output.

you can alos verify if the user still in use try command

#ps -fu

[sanalp]

could you explain...
since its binary file.....

[Dennis Handly]

>could you explain, since it's binary file..

Look at fwtmp(1M). Basically:
# /usr/sbin/acct/fwtmp -X < /var/adm/wtmps > wtmps.txt
edit wtmps.txt
# /usr/sbin/acct/fwtmp -icX < wtmps.txt > /var/adm/wtmps