Re: Logging Outside logins
Date: Thu, 4 Sep 2003 15:52:53 +0200 To: aix-l@Princeton.EDU
the wtmp structure has changed from 4.x to 5.x
so programs (f.e. ssh) need to be recompiled
From: Brian C. Kacmarsky [mailto:bkacmarsky@RWU.EDU]
Sent: Thursday, September 04, 2003 3:34 PM
Subject: Logging Outside logins
I have been working with a problem since we went live on our new P650 a
few weeks ago. Before moving to the P650 we were using a F50 (Running
AIX 4.3.3) and were able to see all login information (by using finger,
etc.) of all users regardless where they were logging in from
(internally here on our network and people outside our firewall
connecting from another location). Now that we are on the P650 (Running
AIX 5.1), We are no longer able to see when an individual is logged into
the system from outside the firewall. The commands such as "last" or "f"
yield no results and show that a user (including yourself) is not even
logged in or was ever logged in, therefore showing no logs of when or
what a user is doing while connected outside the firewall. I am not a
big fan of this, since I can not track or account for any users actions
at a specific time if I have no logs for them.
Has anyone heard of this type of problem and know of any resolutions
around it? Does AIX 5.1 log things differently then AIX 4.3.3?
Any information would be appreciated. Thanks.
Brian in RI