FreeBSD utmp/wtmp/lastlog

[gaf at blu.org (Jerry Feldman)]

I'm trying to troubleshoot a problem with a FreeBSD system with 
the /var/run/utmp, var/log/lastlog, var/log/wtmp
I found that the dates on both /var/run/utmp and var/log/lastlog were old, 
but it does appear that /var/log/wtmp is being maintained. (I have since 
blown away the old utmp and truncated it, and it now has 0 length).

I know that noone will write into wtmp or lastlog if they do not exist. 
The assocated commands such as who(1), w(1),ac(8) show nothing as is 
expected since they use those files. All the files are owned by root in 
group wheel. (rw-r--r--).

The only clue I have is that the system was recently configured to use 
OpenLDAP as the password server. The system manager left to play golf, and 
won't be in until morning, so I can't do much tonight. The system used to 
use NIS for that. The passwords are being served since I can log in.


-- 
Jerry Feldman <gaf at blu.org>
Boston Linux and Unix user group
http://www.blu.org PGP key id:C5061EA9
PGP Key fingerprint:053C 73EC 3AC1 5C44 3E14 9245 FB00 3ED5 C506 1EA9

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.