ssh and still logged in

[George Otepka]

Hello,
after installation ssh T1471AA_A.03.61.002_HP-UX_B11.11_32+64.depot.
The last command answers me users still logged in and they are logout.

It is in the case normal users (paul,geor..) not root and
only in ssh connection, via telnet connection it is OK.

root pts/0 Tue Oct 14 07:32 still logged in
root pts/0 Mon Oct 13 17:07 - 18:23 (01:16)
geor pts/tb Mon Oct 13 12:11 - 12:12 (00:00) it is via telnet
root pts/ta Mon Oct 13 12:10 - 12:12 (00:02) dtto
root pts/0 Mon Oct 13 11:51 - 16:55 (05:03)
paul pts/4 Mon Oct 13 09:21 still logged in
geor pts/3 Mon Oct 13 07:45 still logged in
geor pts/2 Mon Oct 13 07:45 still logged in
geor pts/0 Sun Oct 12 12:17 still logged in
root pts/0 Sun Oct 12 11:33 - 12:17 (00:43)
geor pts/0 Sat Oct 11 15:14 still logged in
geor pts/1 Sat Oct 11 15:11 still logged in
root pts/0 Sat Oct 11 15:08 - 15:14 (00:05)
rebootsystem bootThu Oct917:46 still logged in
...
rebootsystem bootThu Oct9 15:25-17:46(02:20)

in the previous version ssh it works correctly.
Make I some mistake or ommit something???
George

[Steven E. Protter]

I'm not clear at this hour if the /var/adm/wtmp file tracks ssh logins.

Its corrupt.

It needs to be removed and touched. It has nothing to do with ssh. You are having trouble with telnet connections as well.

The last command gives readable output of the wtmp file.


Erase and re-rcreate it and you'll be fine. Also make sure /var has enough space.

SEP

[George Otepka]

telnet connections are OK.
addr. var is not full 8% used.
the files wtmp utmp btmp seems not to be corrupted
and they are redable by fwtmp
i can see in this files all records (I think)
george

[James Specht]

George & Steven,

I have to believe there is a bug in ssh 3.61. I have the same problem and it started the moment I updated ssh on all of my HPUX system. I don't allow telnet or ftp to these boxes either. Only ssh connections are made.

--Jim

[George Otepka]

Thank you Jim
now we are two with this problem.
I hope I do not do somethink wrong.
george

[Jdamian]

No. We are three.
I started the following thread on October 10th

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=231147

[George Otepka]

I do not quite understand if the patches
PHNE_24829 (I have installed this one)
and PHNE_26096 PHNE_14820
solve this problem???
It seems not.

Wait for fix or return to the oldest ssh???

George