Bug#2257: forwarded message from Martin Hardcastle
Package: netstd? miscutils?
Version: netstd 1.24-1, miscutils 1.3-2
Below is a report from one of my users about an odd utmp-corruption
problem. The user uses rlogin to connect from artemis.chu.cam.ac.uk
(131.111.131.1) to chiark (131.111.131.114). chiark has another IP
interface, address 10.0.0.1 (set up in /etc/hosts as
chiark.slip.local), which is being used for unrelated SLIP activity.
The utmp file does in fact contain the data that who &c are
displaying, so the bug is either in rlogind (passing the wrong data to
login) or in login (misinterpreting its arguments and corrupting the
utmp).
I also enclose the output of a `utdump' perl script, and a uuencoded
copy of my utmp file.
Ian.
------- start of forwarded message (RFC 934 encapsulation) -------
Return-Path: <mjh22>
Received: by chiark.chu.cam.ac.uk
id m0tgs3F-0002boC
(Debian /\oo/\ Smail3.1.29.1 #29.35); Mon, 29 Jan 96 11:47 GMT
Message-Id: <m0tgs3F-0002boC@chiark.chu.cam.ac.uk>
X-Mailer: ELM [version 2.4 PL24 PGP2]
Content-Type: text
Content-Length: 1070
From: mjh22 (Martin Hardcastle)
To: ijackson (Ian Jackson)
Subject: finger oddity
Date: Mon, 29 Jan 1996 11:47:12 +0000 (GMT)
If I am logged on to chiark from artemis.chu (131.111.131.1) finger (&
who, rusers -l, &c) seems to resolve the address wrongly:
>finger
Login Name Tty Idle Login Time Office Office Phone
matthew Matthew Slattery p1 7 Jan 29 11:32 (agaric.atml.co.u)
matthew Matthew Slattery p2 4 Jan 29 11:32 (agaric.atml.co.u)
mjh22 Martin Hardcastle *p3 Jan 29 11:41 (chiark.slip.loca)
richard Richard Kettlewell p0 5 Jan 29 09:56 (muskogee.elmail.)
>finger mjh22
Login: mjh22 Name: Martin Hardcastle
Directory: /u2/mjh22 Shell: /usr/bin/tcsh
Office: Room 901 Cavendish Lab, x3-9242 Home Phone: 0589 328842
On since Mon Jan 29 11:41 (GMT) on ttyp3 from chiark.slip.loca (messages off)
Mail forwarded to mjh22@mrao.cam.ac.uk
No mail.
I've noticed this behaviour before: until recently it thought I was on
from club.eng if I logged on from artemis. I would guess that it's
matching to the last entry in /etc/hosts, but I've no idea why: I
just thought you might be interested.
Martin
------- end -------
RUN_LVL 20019 ~~ ~ 310c95f9 runlevel 0.0.0.0
LOGIN_PROC 136 1 tty1 310c9625 LOGIN 0.0.0.0
LOGIN_PROC 5722 2 tty2 310ce99b LOGIN 0.0.0.0
LOGIN_PROC 5417 3 tty3 310ce643 LOGIN 0.0.0.0
LOGIN_PROC 139 4 tty4 310c9625 LOGIN 0.0.0.0
LOGIN_PROC 140 5 tty5 310c9625 LOGIN 0.0.0.0
INIT_PROC 141 x7 310c9623 0.0.0.0
INIT_PROC 142 cp 310c9623 0.0.0.0
LOGIN_PROC 279 c1 ttyc1 310c9663 LOGIN 0.0.0.0
LOGIN_PROC 4773 c2 ttyc2 310cdd22 0.0.0.0
LOGIN_PROC 4771 c3 ttyc3 310cdd21 0.0.0.0
LOGIN_PROC 146 a1 ttya1 310c9626 0.0.0.0
USER_PROC 804 p0 ttyp0 310c99c7 richard muskogee.elmail. 193.112.20.45
USER_PROC 1873 p1 ttyp1 310cb04c matthew agaric.atml.co.u 193.130.79.5
USER_PROC 1876 p2 ttyp2 310cb050 matthew agaric.atml.co.u 193.130.79.5
NULL 0 00000000 0.0.0.0
NULL 0 00000000 0.0.0.0
NULL 0 00000000 0.0.0.0
USER_PROC 4077 p6 ttyp6 310cd219 Szenda janus.csi.cam.ac 131.111.12.21
NULL 0 00000000 0.0.0.0
NULL 0 00000000 0.0.0.0
NULL 0 00000000 0.0.0.0
USER_PROC 7069 p4 ttyp4 310cfd63 ijackson ealingbroadway.c 208.102.0.80
NULL 0 00000000 0.0.0.0
NULL 0 00000000 0.0.0.0
NULL 0 00000000 0.0.0.0
USER_PROC 6331 p3 ttyp3 310cf09f kat mtcsa.mt.ic.ac.u 155.198.100.2
USER_PROC 7110 p5 ttyp5 310cfd9d ijackson ealingbroadway.c 208.102.0.80
USER_PROC 7279 p7 ttyp7 310d0150 ijackson ealingbroadway.c 208.102.0.80
USER_PROC 7291 p8 ttyp8 310d016a kat mtcsa.mt.ic.ac.u 155.198.100.2
USER_PROC 7379 pa ttypa 310d02e6 ijackson ealingbroadway.c 208.102.0.80
USER_PROC 7500 pb ttypb 310d04b9 mjh22 chiark.slip.loca 10.0.0.1
DEAD_PROC 7533 pc ttypc 310d05df dmm20 hammer.thor.cam. 131.111.8.39
begin 664 utmp.gz
M'XL(`%X'#3$"`]64/6@4013'Y\Z<.60/04Q4U,)O+!S<2^)9"A8B',F)@F#W
M,KO>[MW.[K$[:XQ""M,(?A2"`0G!0NQMQ2*FB:UH+5H%+`1;"SWG[>PC(83L
MM??@P7\>\]MY[\V^*3'&)J896V";MJ`7?UY:=IR&@7O/#=@.ME?[8^U*S=L4
M0W%FR;*;,]>N3[.=#;D[XQE7IQB*Y9_%W/FQC)N@&(JK&\7<$Y/G),4F!\SS
MJ>&F*#8U`%?1_FQ;['Z#L5.:8[L8<L^WQ42OF,,\#Y6R/`5M1"$&J._M`</1
M1:`X^6W+>?W^JJ7]Q[_^ZNWQ3>Y-SM%%H#@Q`/?"]!-H(XJS2[MSH]I/[\FX
MWL5\&XI/K_3_Z0L/8H?)-.E&;=?E;B#!#_A:[^`%Y&Z,&HX.0-%\9]D2E/+<
M.09MT)_@H&3`1<33M4<S%>1NY1SU!46K@&-#8EC?K_VFODM4GQ9'OECVS0=N
MZ`!C'0C3A(O$YP(D![$866/#5-_*45,?#;P69?'7LOT.B&X2A2X$?MB>C2-P
MYF">B\]W66N8ZOMPV-1'\X?B]6_+[H+*UE*)!+A4'']2P=/E=:>,W'K>%WK0
MM!A9*>@+<M$QPS6(:WRLM$JU0NYASETF3HN.YHKR_)IS0!Q<J6Z4B\]K'C?<
M+'%:O!^IV;+CU7&6A>=#W.5)X/=X$`G8QUBIBGGDG"!.B^^5FNU(6<<WQP,I
5W9@K+XJSB5B,JN?^`X#`TO8X!P``
`
end
Reply to: