From owner-freebsd-stable@FreeBSD.ORG Fri Feb 24 23:00:28 2012 Return-Path: Delivered-To: stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id D666F106564A for ; Fri, 24 Feb 2012 23:00:28 +0000 (UTC) (envelope-from ed@hoeg.nl) Received: from mx0.hoeg.nl (mx0.hoeg.nl [178.63.0.170]) by mx1.freebsd.org (Postfix) with ESMTP id 973418FC0C for ; Fri, 24 Feb 2012 23:00:28 +0000 (UTC) Received: by mx0.hoeg.nl (Postfix, from userid 1000) id DCFB72A28CCF; Sat, 25 Feb 2012 00:00:27 +0100 (CET) Date: Sat, 25 Feb 2012 00:00:27 +0100 From: Ed Schouten To: Vlad Galu Message-ID: <20120224230027.GJ32748@hoeg.nl> References: <20120224221526.GH32748@hoeg.nl> <350DE43596674E608581BB2536231611@dudu.ro> <20120224224016.GI32748@hoeg.nl> <9DAEF77AE05F4151AD561D26DF5D69F1@dudu.ro> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="Do4IU1xF/9sod/r6" Content-Disposition: inline In-Reply-To: <9DAEF77AE05F4151AD561D26DF5D69F1@dudu.ro> User-Agent: Mutt/1.5.21 (2010-09-15) Cc: stable@freebsd.org Subject: Re: Inconsistent utx.active? X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 24 Feb 2012 23:00:28 -0000 --Do4IU1xF/9sod/r6 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hello Vlad, * Vlad Galu , 20120224 23:54: > [1330014380.652067 -- Thu Feb 23 17:26:20 2012] user process: id=3D"4f86d= 023f250d3c9" pid=3D"39012" user=3D"dudu" line=3D"pts/0" host=3D"A.B.C.D" > [1330014398.177818 -- Thu Feb 23 17:26:38 2012] user process: id=3D"269d7= 5b37f295346" pid=3D"39221" user=3D"dudu" line=3D"pts/1" host=3D"A.B.C.D" > [1330085459.796787 -- Fri Feb 24 13:10:59 2012] user process: id=3D"d026e= 8e5c0648ec2" pid=3D"38093" user=3D"dudu" line=3D"pts/0" host=3D"A.B.C.D" > [1330122640.813570 -- Fri Feb 24 23:30:40 2012] user process: id=3D"dd8d3= dff2f3002a0" pid=3D"82959" user=3D"dudu" line=3D"pts/0" host=3D"X.Y.Z.T" > [1330122493.638088 -- Fri Feb 24 23:28:13 2012] user process: id=3D"92b73= 279a543d99f" pid=3D"73085" user=3D"dudu" line=3D"pts/1" host=3D"X.Y.Z.T" > [1330122498.444614 -- Fri Feb 24 23:28:18 2012] user process: id=3D"c0f3c= 404a3ca8565" pid=3D"73573" user=3D"dudu" line=3D"pts/2" host=3D"X.Y.Z.T" > [1330122634.538515 -- Fri Feb 24 23:30:34 2012] dead process: id=3D"fea56= df5dde26e4d" pid=3D"76338" You mentioned in a previous email that these entries belong to SSH sessions. Are you sure about this? The identifiers seem to contain randomly generated data, just like pam_lastlog(8) does. OpenSSH uses identifiers based on the TTY name, like so: > [1330124273.955165 -- Fri Feb 24 23:57:53 2012] user process: id=3D"70747= 32f30000000" pid=3D"15880" user=3D"ed" line=3D"pts/0" host=3D"m.fxq.nl" 0x7074732f30 is equal to "pts/0". Maybe they're generated by some different login service or you've configured PAM/OpenSSH/etc. in a non-default way? Thanks so far, --=20 Ed Schouten WWW: http://80386.nl/ --Do4IU1xF/9sod/r6 Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (FreeBSD) iQIcBAEBAgAGBQJPSBaLAAoJEG5e2P40kaK7TyAP/jbNzaOo6NqnuvBE9DeO0zpa /2d0fmtFNbPkTWTSIlgSBZAnnsgo//bUM0eB304a2+nQh+XRrw+QdXDmmhLClBt6 4KYuHKsr+8XUFbUHgo/jQ9fqOL8AseLf5EN7tF3bJ4zI0lpwVrGH149y82yIbB0+ HQOmZFUBNZS0ABXBkX38604Grp2o3U+/kUEogMA14Rk+p50gXLapzbV+94b8AA6/ UnxUD6fym0SkXTh8ghP0eDEkfQFpu51Y6lg1CJw1XolR/hG35jTIfrp82XKdjP1j UOAjThbCv/Tg+kRDcIc54Hkxwa3Cd+pwb/F2N0WGJgJ9c8rko4+bzR9U0+fG9PSZ EK7Nh9XKC2KgI0VK8BXVuddJ8Nwv4mtHTFNn42pVicGeoOQliSntlwPrpk0PRD6G rVFi1CQ+SFqRMIh83im0OayLlla/3Tyadd43a0mqj0bMfAit5CfJRmBtHEv9NDhi M0rNjDPHW2z1tobSTmmIJpWF0zXWa+5ytWzaqlBT+vZn5xPx4/kEg66fl5zRq4sq BzIU/czEr8JiC/Aj+7EoM9iJDlD2HuSBFXZTbx6WSH2G0jyJN0cHM/xVrffecTNn 1cXXgKnEJXN5BAfmIbR1/Mrd/6ZUJqgqO9EZYj9vhV6Zk84sqHuM+v4VG/c0TDpT QU+ro01/NAQEf4N6Hqpj =XDWx -----END PGP SIGNATURE----- --Do4IU1xF/9sod/r6--