Solved

utmpx wtmpx not showing recent entries

Posted on 2002-07-08
5
275 Views
Last Modified: 2013-12-27
Have a puzzling issue here.  I have some Sol 7/8 computers that are having a problem when I issue a "last -20" command.  Some of the boxes report entries starting 6 months ago and others report nothing just "wtmp begins Mon Jun 15 06:40" (or some other date in the past).

I've looked at /var/adm/*tmpx and done a strings on them.  They are being modified with new date (mod date changes) and I can see the new logins in the file when I do a strings on them.  Any ideas?

--- Micah
0
Comment
Question by:micahman
  • 2
  • 2
5 Comments
 
LVL 14

Accepted Solution

by:
chris_calabrese earned 100 total points
ID: 7143382
The files may be corrupt.  Try blowing them away, recreating them, and rebooting.
0
 

Expert Comment

by:emrehayretci
ID: 7153433
IT should be related with your audit settings. It is possible to activate them. If you are using the default settings, then the problem should be related with the file itself. It may be corrupted.

Delete it and create it with touch again.
0
 

Author Comment

by:micahman
ID: 7154012
As the wtpmx and utmpx files are not test files and, from what I have read, can corrupt the OS if removed improperly, I'd rather not just delete these files randomly and hope that they come back and all is well.  Has anyone had experience with this? Anyone know where there are docs that explain this process?  I have searched Sun's and many other sites and found nothing that relates to this process.
0
 
LVL 14

Expert Comment

by:chris_calabrese
ID: 7154548
It won't corrupt the OS, but it will confuse things like last and who. That's why you need to reboot afterwards to wipe the slate clean.
0
 

Author Comment

by:micahman
ID: 7159173
Finally got a chance to test this out on one of the servers.  Worked like a charm.  Thanks!
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

When you do backups in the Solaris Operating System, the file system must be inactive. Otherwise, the output may be inconsistent. A file system is inactive when it's unmounted or it's write-locked by the operating system. Although the fssnap utility…
In tuning file systems on the Solaris Operating System, changing some parameters of a file system usually destroys the data on it. For instance, changing the cache segment block size in the volume of a T3 requires that you delete the existing volu…
Learn how to navigate the file tree with the shell. Use pwd to print the current working directory: Use ls to list a directory's contents: Use cd to change to a new directory: Use wildcards instead of typing out long directory names: Use ../ to move…
In a previous video, we went over how to export a DynamoDB table into Amazon S3.  In this video, we show how to load the export from S3 into a DynamoDB table.

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now