Re: Logging Outside logins

Holger.VanKoll_at_SWISSCOM.COM
Date: 09/04/03

  • Next message: Breuer, Gregory S.: "Using a PC for a nameserver" 
    Date:         Thu, 4 Sep 2003 15:52:53 +0200
To: aix-l@Princeton.EDU

    the wtmp structure has changed from 4.x to 5.x

    so programs (f.e. ssh) need to be recompiled

    -----Original Message-----
    From: Brian C. Kacmarsky [mailto:bkacmarsky@RWU.EDU]
    Sent: Thursday, September 04, 2003 3:34 PM
    To: aix-l@Princeton.EDU
    Subject: Logging Outside logins

    Hi Everyone

    I have been working with a problem since we went live on our new P650 a
    few weeks ago. Before moving to the P650 we were using a F50 (Running
    AIX 4.3.3) and were able to see all login information (by using finger,
    last, who,
    etc.) of all users regardless where they were logging in from
    (internally here on our network and people outside our firewall
    connecting from another location). Now that we are on the P650 (Running
    AIX 5.1), We are no longer able to see when an individual is logged into
    the system from outside the firewall. The commands such as "last" or "f"
    yield no results and show that a user (including yourself) is not even
    logged in or was ever logged in, therefore showing no logs of when or
    what a user is doing while connected outside the firewall. I am not a
    big fan of this, since I can not track or account for any users actions
    at a specific time if I have no logs for them.

    Has anyone heard of this type of problem and know of any resolutions
    around it? Does AIX 5.1 log things differently then AIX 4.3.3?

    Any information would be appreciated. Thanks.

    Brian in RI

  • Next message: Breuer, Gregory S.: "Using a PC for a nameserver"

    Relevant Pages

    • Re: Printer for all users ??
      ... logins, so that everyone who logs on to the computer can have access ... to set up the printer through a MS print server. ... rather many people logging on to one computer. ...
      (microsoft.public.windowsxp.general)
    • Re: Syslog query - Im probably doing something stoopid
      ... I'd say the issue is with the AIX systems or the network, ... but it's likely that syslog handles log messages ... I'd recommend checking the network utilization with different levels of ... I'd also recommend looking hard at what you are logging. ...
      (comp.security.unix)
    • Re: Syslog query - Im probably doing something stoopid
      ... I'd say the issue is with the AIX systems or the network, ... but it's likely that syslog handles log messages ... I'd recommend checking the network utilization with different levels of ... I'd also recommend looking hard at what you are logging. ...
      (comp.security.unix)
    • CORE_DUMP_FAILED in error log on AIX 5.2 ML04
      ... Some number of AIX boxes running AIX 5.2 ML04 logs similar to listed ... paging space which at the time system logs error used about 5% of PS. ... Does anyone have seen it on AIX 5.2 ML04 too? ...
      (comp.unix.aix)
    • AIX remote SSH root logins
      ... I have downloaded the OpenSSH -current snapshot and compiled it for AIX ... Looking in the src for 3.5 it looks as though this patch is ... Disable remote logins by root ...
      (comp.security.ssh)