FAQ Search Today's Posts Mark Forums Read
» Video Reviews

» Linux Archive

Linux-archive is a website aiming to archive linux email lists and to make them easily accessible for linux users/developers.


» Sponsor

» Partners

» Sponsor

Go Back   Linux Archive > Redhat > Red Hat Linux

 
 
LinkBack Thread Tools
 
Old 07-03-2008, 06:35 PM
 
Default utmp and wtmp

Did you look at the security logs

I believe that logs in and out as well if ssh is setup to do so


Sent via BlackBerry from T-Mobile

-----Original Message-----
From: "Paula J. Lindsay" <paula@scripps.edu>

Date: Thu, 03 Jul 2008 11:23:45
To: General Red Hat Linux discussion list<redhat-list@redhat.com>
Subject: utmp and wtmp


Hi everyone,
I have a scientist that runs an instrument in her lab. She uses utmp
and logrotate to rotate the wtmp file and then
at the beginning of the month, she records everyone's logging in and out
usage on her RHE 5 machine so she
can charge them for the use of the instrument. Sometimes students and
other doctor's run experiments all night.
Well, I have her RHE 5 machine rotating every month at the beginning of
the month, it does this at midnight.
The problem is that whoever is logged in at that time is dropped and
the utmp doesn't continue to record his/her
time on the machine. They could be on there for another 5 hours, but it
doesn't pick up that user again. Is there
any way to make the utmp pick up that user or continue recording that
user when the logs are processing again?
I know this is somewhat of an irritating quirk, but it is important to
her to find out when the person logs back out
so she doesn't charge him too much or too little. Any
help/advice/suggestions would be greatly appreciated. Many
thanks in advance.
Paula

--
Paula J. Lindsay
IT Analyst III
IT Services
10550 North Torrey Pines Road
La Jolla, CA 92037
858.784.9378 (office)
858.784.9301 (fax)
paula@scripps.edu

--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@redhat.com?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@redhat.com?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list
 
Old 07-04-2008, 11:11 AM
George Magklaras
 
Default utmp and wtmp

The best thing in that case would be to increase the logrotate interval
for wtmp from a monthly to yearly basis. Somewhere under /etc you should
have an /etc/logrotate.conf file. Normally, a default entry for wtmp
would be:


# no packages own wtmp -- we'll rotate them here
/var/log/wtmp {
monthly
minsize 1M
create 0664 root utmp
rotate 1
}

In plain English, this means "rotate the file once per month with
priority the timestamp and not the minimum size at 1 Meg". If you
replace the line "monthly" bit with "yearly" and take the minsize
parameter out, it should do the job.


After that, do a: logrotate -dv /etc/logrotate.conf and verify what the
logrotate tool is planning to do with the new parameters. It should
verify the yearly rotation for wtmp.


Warning: Depending on how busy the system is not only wtmp/utmp log wise
but from other logs, I normally partition /var separarely to make sure I
have plenty of space. If you have /var under root, watch out for the
size of the log(s).


GM

--
--
George Magklaras

Senior Computer Systems Engineer/UNIX Systems Administrator
EMBnet Technical Management Board
The Biotechnology Centre of Oslo,
University of Oslo
http://folk.uio.no/georgios



Paula J. Lindsay wrote:

Hi everyone,
I have a scientist that runs an instrument in her lab. She uses utmp
and logrotate to rotate the wtmp file and then
at the beginning of the month, she records everyone's logging in and out
usage on her RHE 5 machine so she
can charge them for the use of the instrument. Sometimes students and
other doctor's run experiments all night.
Well, I have her RHE 5 machine rotating every month at the beginning of
the month, it does this at midnight.
The problem is that whoever is logged in at that time is dropped and
the utmp doesn't continue to record his/her
time on the machine. They could be on there for another 5 hours, but it
doesn't pick up that user again. Is there
any way to make the utmp pick up that user or continue recording that
user when the logs are processing again?
I know this is somewhat of an irritating quirk, but it is important to
her to find out when the person logs back out
so she doesn't charge him too much or too little. Any
help/advice/suggestions would be greatly appreciated. Many

thanks in advance.
Paula





--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@redhat.com?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list
 

Thread Tools




All times are GMT. The time now is 04:04 AM.

VBulletin, Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.
Copyright 2007 - 2008, www.linux-archive.org