Re: Inconsistent utx.active?
--Do4IU1xF/9sod/r6
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Hello Vlad,
* Vlad Galu <dudu@dudu.ro>, 20120224 23:54:
> [1330014380.652067 -- Thu Feb 23 17:26:20 2012] user process: id=3D"4f86d=
023f250d3c9" pid=3D"39012" user=3D"dudu" line=3D"pts/0" host=3D"A.B.C.D"
> [1330014398.177818 -- Thu Feb 23 17:26:38 2012] user process: id=3D"269d7=
5b37f295346" pid=3D"39221" user=3D"dudu" line=3D"pts/1" host=3D"A.B.C.D"
> [1330085459.796787 -- Fri Feb 24 13:10:59 2012] user process: id=3D"d026e=
8e5c0648ec2" pid=3D"38093" user=3D"dudu" line=3D"pts/0" host=3D"A.B.C.D"
> [1330122640.813570 -- Fri Feb 24 23:30:40 2012] user process: id=3D"dd8d3=
dff2f3002a0" pid=3D"82959" user=3D"dudu" line=3D"pts/0" host=3D"X.Y.Z.T"
> [1330122493.638088 -- Fri Feb 24 23:28:13 2012] user process: id=3D"92b73=
279a543d99f" pid=3D"73085" user=3D"dudu" line=3D"pts/1" host=3D"X.Y.Z.T"
> [1330122498.444614 -- Fri Feb 24 23:28:18 2012] user process: id=3D"c0f3c=
404a3ca8565" pid=3D"73573" user=3D"dudu" line=3D"pts/2" host=3D"X.Y.Z.T"
> [1330122634.538515 -- Fri Feb 24 23:30:34 2012] dead process: id=3D"fea56=
df5dde26e4d" pid=3D"76338"
You mentioned in a previous email that these entries belong to SSH
sessions. Are you sure about this? The identifiers seem to contain
randomly generated data, just like pam_lastlog(8) does. OpenSSH uses
identifiers based on the TTY name, like so:
> [1330124273.955165 -- Fri Feb 24 23:57:53 2012] user process: id=3D"70747=
32f30000000" pid=3D"15880" user=3D"ed" line=3D"pts/0" host=3D"m.fxq.nl"
0x7074732f30 is equal to "pts/0".
Maybe they're generated by some different login service or you've
configured PAM/OpenSSH/etc. in a non-default way?
Thanks so far,
--=20
Ed Schouten <ed@80386.nl>
WWW: http://80386.nl/
--Do4IU1xF/9sod/r6
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (FreeBSD)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=XDWx
-----END PGP SIGNATURE-----
--Do4IU1xF/9sod/r6--
討論串 (同標題文章)
完整討論串 (本文為第 7 之 8 篇)：