AIX

AIX

Connect with fellow AIX users and experts to gain knowledge, share insights, and solve problems.


#Power
 View Only
Expand all | Collapse all

AIX 5.3 TL7 'who' returns blank

  • 1.  AIX 5.3 TL7 'who' returns blank

    Posted Thu May 22, 2008 10:10 AM

    Originally posted by: SystemAdmin


    hello, i have several aix 5.3 tl7 lpars on a p570 and one two of the lpars the 'who' and 'finger' commands do not return any information. i can give 'who' the full path to the wtmp file and it works correctly. I also have several other lpars on the same box (installed from the same dvd) where 'who' and 'finger' work correctly. Any ideas or thoughts on what the problem could be? Thanks in advance.
    #AIX-Forum


  • 2.  Re: AIX 5.3 TL7 'who' returns blank

    Posted Thu May 22, 2008 10:17 AM

    Originally posted by: tony.evans


    Are you running as root? If not, does it work as root but not as a regular user?

    What are the permissions on /etc/utmp?
    #AIX-Forum


  • 3.  Re: AIX 5.3 TL7 'who' returns blank

    Posted Thu May 22, 2008 10:47 AM

    Originally posted by: SystemAdmin


    yes, running as root and the permissions on the file are as follows

    ls -l /etc/utmp
    -rw-r--r-- 1 root system 22680 May 21 13:40 /etc/utmp

    ls -l /var/adm/wtmp
    -rw-rw-r-- 1 adm adm 110808 May 21 13:40 /var/adm/wtmp


    who
    finger

    No one logged on
    #

    Message was edited by: zuess
    #AIX-Forum


  • 4.  Re: AIX 5.3 TL7 'who' returns blank

    Posted Thu May 22, 2008 10:59 AM

    Originally posted by: tony.evans


    Finger is returning some output, it's telling you no one is logged in, that may not be the same as not working.

    /var/adm/wtmp contains login sessions which have since closed, not just currently logged in users.

    /etc/utmp is the one used by finger and who for currently logged in users.

    How do you connect to the server when you run the finger / who command?

    Is / full?

    Message was edited by: tony.evans
    #AIX-Forum


  • 5.  Re: AIX 5.3 TL7 'who' returns blank

    Posted Thu May 22, 2008 12:37 PM

    Originally posted by: SystemAdmin


    No file systems are full and again this is happening on several lpars. I am logging on using ssh, but it doesn't matter is if I login using telnet either. However, if i do logon to the console who and finger both show me logged in as root, but does not show me as the users logged in.
    #AIX-Forum


  • 6.  Re: AIX 5.3 TL7 'who' returns blank

    Posted Fri May 23, 2008 07:09 AM

    Originally posted by: tony.evans


    (I know you say this is more than one server, but by focussing on one server we'll find the problem on them all)

    What does 'last -n 20' show?

    Anything in errpt?

    What about the following when logged on via telnet,

    date
    ls -l /etc/utmp
    ls -l /var/adm/wtmp
    ls -l /etc/security/lastlog

    Do you telnet in as root or as another user and su to root? Does doing it the other way make a difference?

    Message was edited by: tony.evans
    #AIX-Forum


  • 7.  Re: AIX 5.3 TL7 'who' returns blank

    Posted Fri May 23, 2008 11:58 AM

    Originally posted by: SystemAdmin


    Yes, I've same behavior

    sandbox]root/root>oslevel -s
    5300-06-03-0732
    sandbox]root/root>w
    10:53AM up 46 days, 23:40, 0 users, load average: 2.02, 2.50, 2.72
    User tty login@ idle JCPU PCPU what
    sandbox]root/root>who
    sandbox]root/root>/usr/sbin/acct/fwtmp < /etc/utmp |grep pts
    dpcadm pts/0 pts/0 8 2785484 0000 0002 1210651166 localhost Mon May 12 22:59:26 EST 2008
    opersisa pts/4 pts/4 8 2256982 0000 0002 1207792029 localhost Wed Apr 9 20:47:09 EST 2008
    opersisa pts/1 pts/1 8 1097950 0000 0002 1207859782 localhost Thu Apr 10 15:36:22 EST 2008
    dpcadm pts/3 pts/3 8 2748448 0000 0002 1210088323 192.168.70.105
    sandbox]root/root>which who
    /usr/bin/who
    sandbox]root/root>lslpp -w /usr/bin/who
    File Fileset Type
    ----------------------------------------------------------------------------
    /usr/bin/who bos.rte.misc_cmds File
    sandbox]root/root>lslpp -L bos.rte.misc_cmds
    Fileset Level State Type Description (Uninstaller)
    ----------------------------------------------------------------------------
    bos.rte.misc_cmds 5.3.7.0 C F Miscellaneous Commands
    Any Issues?

    Message was edited by: JuAnKmil0
    #AIX-Forum


  • 8.  Re: AIX 5.3 TL7 'who' returns blank

    Posted Wed May 28, 2008 01:57 PM

    Originally posted by: SystemAdmin


    This appears to be just an issue with ssh. I may have spoken incorrectly earlier in my post, but if I am telneted in or logged in at the console, both 'who' and 'finger' work correctly. If I am logged in via ssh, I do not show with either of the commands. Any idea why ssh does this?
    #AIX-Forum


  • 9.  Re: AIX 5.3 TL7 'who' returns blank

    Posted Wed October 22, 2008 08:33 AM

    Originally posted by: brinaw


    Hello. I've just hit this one too, on separate AIX 5.3 systems, one at TL06 and the other is a freshly installed ML4 system. I'm using OpenSSH_4.5p1, OpenSSL 0.9.8d 28 Sep 2006 (IBM versions off the CDs). I've not tried switching to SSH 4.7 yet - looking forward to getting the IBM version of that.

    I ran sshd in debug mode and saw the error "Attempt to write login records by non-root user (aborting)" when a session tried to login using SSH under a non-privileged account. The error doesn't appear if I use SSH to log into root. Neither SSH session appears to log anything to wtmp or utmp. Hence who reports nothing, and "who am i" in the sessions reports just the username and login terminal, but no date or source for the login.

    I've tried changing the sshd_config to set "UsePrivilegeSeparation no" but this didn't fix it. I've seen other discussions and checked all file permissions are correct.

    Now I'm stuck since our auditors won't be impressed if no SSH logins get recorded. May need to add some home-made audit logging code in /etc/profile if I can't get SSHD to do it.

    Has anyone else got any more info on this?

    Cheers
    #AIX-Forum


  • 10.  Re: AIX 5.3 TL7 'who' returns blank

    Posted Wed October 22, 2008 05:39 PM

    Originally posted by: shargus


    sandbox]root/root>oslevel -s
    5300-06-03-0732

    Your upgrade is not complete. oslevel is reporting TL6, not TL7.

    We've had this problem before. For us, we had to remove DCE (needed for OpenView monitoring), THEN upgrade to TL7, then re-install DCE. Then, everything worked.

    Check your installation logs and see if something failed during the upgrade.
    #AIX-Forum


  • 11.  Re: AIX 5.3 TL7 'who' returns blank

    Posted Thu August 20, 2009 02:57 AM

    Originally posted by: Gileb


    Hi everybody,

    We have the same kind of trouble, since aix 6.1. Command who doesn't work correctly (doesn't show anything), and w neither. finger command only shows telneted users, but no ssh users, is it a normal security feature ?
    Apart from that, we always have the following message via syslogd "
    Attempt to write login records by non-root user (aborting)".
    I truss'ed the sshd daemon, but couldn't see any "normal" file being opened with error, also i didnt see it trying to open /etc/utmp, (which seems to be user by finger command).
    If anybody has info on that, i would be greatly interested.

    Thanks in advance

    Gilles Eberhardt
    #AIX-Forum


  • 12.  Re: AIX 5.3 TL7 'who' returns blank

    Posted Thu August 20, 2009 10:06 AM

    Originally posted by: unixgrl


    What is your version of ssh? There is a buggy version of ssh out there that
    has this problem. I think its 4.7. Get the latest openssh version and see if it
    resolves your issue. I remember seeing this same issue during first AIX 6.1 implementations
    and it was whatever openssh came with AIX 6.1.
    #AIX-Forum


  • 13.  Re: AIX 5.3 TL7 'who' returns blank

    Posted Fri August 21, 2009 03:10 AM

    Originally posted by: Gileb


    Thank you for your reply !
    The openssh version installed, is the one delivered with aix 6.1 ( openssh.base.server 4.5.0.5301 COMMITTED Open Secure Shell Server). I will try to upgrade it, and will give you the result.

    Regards, Gilles
    #AIX-Forum


  • 14.  Re: AIX 5.3 TL7 'who' returns blank

    Posted Fri August 21, 2009 03:40 AM

    Originally posted by: Gileb


    Ok, i upgraded to the lastest version of openssh for aix6.1 (5.01), and it works !!!

    logname / who / finger, all of it work all right now.

    thanks for you help and time
    #AIX-Forum