From owner-freebsd-questions@FreeBSD.ORG Sat May 3 16:18:40 2014 Return-Path: Delivered-To: questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id AF593A46 for ; Sat, 3 May 2014 16:18:40 +0000 (UTC) Received: from mail-ie0-x232.google.com (mail-ie0-x232.google.com [IPv6:2607:f8b0:4001:c03::232]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 81D621AAA for ; Sat, 3 May 2014 16:18:40 +0000 (UTC) Received: by mail-ie0-f178.google.com with SMTP id lx4so6485686iec.37 for ; Sat, 03 May 2014 09:18:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=Caz4U154nnT+7LjDqfiprp/cJJwIBrktduUGnDRDRN4=; b=O06LlpIMDpyuisWDSg+67oK7BOXbezIEHwRvgmxKWOnYoUXosH4Srb227NvB8PNFTu UkPWxHcdK6NOt0KOfYxiqfn48O6r6R66oUxjuzw9y+4TaO9+vrFBaZGl/1gJalYCp74Y uDeJg2236X4ClwMdqJrVcWd9MjzIcuyLSYeiLbuXspgakrj0uW+aagGdK0Co6WxKmmvH BOsrYECA4x/u1qfdJMm1GWmzGob3qSfqWLq7J4ZZCAnm/DqFQ5G0SrXTxt5V4K72Qrh6 bmzAS+6lVk5U0SjIHEzUtM7RBJFLs9/g7FcjZonTd2Zh1nIAGg+xB5WTI5eknHH0Zvxh AhnA== MIME-Version: 1.0 X-Received: by 10.51.17.5 with SMTP id ga5mr12703368igd.2.1399133919951; Sat, 03 May 2014 09:18:39 -0700 (PDT) Received: by 10.64.28.198 with HTTP; Sat, 3 May 2014 09:18:39 -0700 (PDT) Date: Sat, 3 May 2014 09:18:39 -0700 Message-ID: Subject: who/w/utx.active inconsistencies/phantoms From: Patrick To: FreeBSD Questions Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.17 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 03 May 2014 16:18:40 -0000 I've got a FreeBSD 9.2 system, and I've noticed that for whatever reason, SSH session disconnects are not being picked up properly, leaving who/w (ie. /var/run/utx.active) to show a bunch of phantom logins. I've not seen this on our 8.x systems. Just wondering if there are any known issues around this? The only configuration around logging in that isn't default is we have "UseLogin yes" set in /etc/ssh/sshd_config.