rexecd not updating wtmp

[Romy]

Hi all,
we are using a rexec client supplied by Baan to access rexecd on HP-UX 11.23. The commands issued by the client are processed correctly
but the HP-UX wtmp(4) file is not updated. Consequently the last(1) command reports no rexecd session.
I know that the rexec option "-t" is used to suppress this logging but where/how can i change this.

regards
R.

[Robert-Jan Goossens]

HI R.

---
The "rexec" command (commonly referred-to as remsh on Unix Systems) is intended to run commands on a remote machine, and communicates with the rexecd on that machine to do so.
Since these accesses are not usually considered logins, they are not logged to /var/adm/wtmp. However, the typical semantics for this command are such that if no command line is explicitly given, remshd will instead perform the task of rlogind to generate a login shell. The rlogind-based login will produce a entry in the file /var/adm/wtmp
---
http://www4.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000080076681

Robert-Jan

[Romy]

Thanks Robert-Jan for answering,
according to your description, this logging of rexecd cannot work. Is this correct ?
But it worked on our "old" Baan-Server using HPUX 11.11 very well. Where is the difference? Is there under 11.23 no way for rexec logging? remshd logging is working, principally for user root, but all users accessing processes by Baan are not logged.

I'am not sure, what the attatched link is for?

regards
R.

[Robert-Jan Goossens]

it could be baan added a few options to the rexec script.

[Bob Ingersoll]

I don't know where the idea came from that rexec sessions aren't logged and displayed by the last command - they certainly are on my 11.23 systems:

beta:/home/root# last
root rexecd Fri Oct 13 09:20 - 09:20 (00:00)
root pts/1 Fri Oct 13 09:14 still logged in

And I don't find any option described on the rexec/rexecd man page to suppress these loggings.

Make sure that wtmp/wtmps have the correct ownership (adm:adm) and other sessions are being logged. Beyond that you may want to ensure your patch levels are current.

[Romy]

Hi Bob,
i also thought so, because on our 11.11 box we didn't change any options for logging and it worked; "last -R" showed the following:
root remshd host1 Thu Oct 12 03:12 - 03:12 (00:00)
lwnwad0 pts/ta host2 Wed Oct 11 11:45 - 11:46 (00:01)
root pts/ta host1 Tue Oct 10 16:17 - 16:18 (00:01)
lwnscm15 pts/tb pc2 Mon Oct 9 12:51 - 12:52 (00:00)
root remshd host1 Sun Oct 8 03:12 - 03:12 (00:00)
root console Sat Oct 7 14:39 - 14:40 (00:00)
reboot system boot Sat Oct 7 14:21 - 14:45 (00:23)
lwnlag0 rexecd pc1 Fri Sep 29 10:12 - 14:21 (8+04:08)
lwnlag0 rexecd pc1 Fri Sep 29 10:12 - 14:21 (8+04:08)
lwnlag0 rexecd pc1 Fri Sep 29 10:12 - 14:21 (8+04:08)
lwnsen0 rexecd pc1 Mon Sep 25 15:26 - 10:55 (19:28)
lwnpij0 rexecd ip1 Mon Sep 25 08:41 - 10:55 (1+02:13)
lwnsen0 rexecd pc2 Mon Sep 4 08:43 - 08:18 (8+23:35)
lwnvow0 rexecd pc3 Mon Aug 21 16:34 - 08:18 (22+15:44)
lwnler1 rexecd pc4 Mon Aug 7 12:49 - 08:18 (36+19:29)
lwnamf0 rexecd pc5 Tue Aug 1 10:31 - 08:18 (42+21:47)

The file permissions are as stipulated. Patchs are current and logging works for all networkconnection exept rexec; some examples:

root pts/te pc1 Mon Oct 16 09:42 still logged in
root remshd host1 Mon Oct 16 09:41 - 09:41 (00:00)
root remshd host1 Mon Oct 16 09:40 - 09:40 (00:00)
root remshd host1 Mon Oct 16 09:38 - 09:38 (00:00)
root remshd host1 Mon Oct 16 09:36 - 09:36 (00:00)
root remshd host1 Mon Oct 16 09:34 - 09:34 (00:00)
lwnsen0 pts/te pc1 Mon Oct 16 09:33 - 09:34 (00:00)
root remshd host1 Mon Oct 16 09:33 - 09:33 (00:00)
root remshd host1 Mon Oct 16 09:27 - 09:27 (00:00)
root remshd host1 Mon Oct 16 09:26 - 09:26 (00:00)
root remshd host1 Mon Oct 16 09:19 - 09:19 (00:00)
lwnler1 pts/td pc2 Mon Oct 16 09:11 still logged in
cadftp ftp svr1 Mon Oct 16 07:35 - 07:35 (00:00)
root remshd host1 Mon Oct 16 07:30 - 07:47 (00:17)

any other idea?
r.
R.

[Craig Sterley]

We are having the same issue with this. Where you able to come up with anything to fix this?

[Falk Stern]

Hi,

we have the same problem with HP-UX 11.31. 11.11 seemed to have the "-t" switch to rexec, which is missing on 11.31. The manpages are not very helpful here.

Is there a possible workaround?

Kind regards,

Falk