[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1105954: openssh-server: OpenSSH produces error on logout because utmp is no longer used



Hi, I am a nosy bystander.

I see this log event on my Debian 13 systems.
I think this is because my systems have neither utmp nor wtmpdb.
I think on such systems, this error message is SAFE TO IGNORE.
I would still like this log event to be generated in the first place
(maybe with something like DoWtmp=no in /etc/ssh/sshd_config.d/foo.conf).

Here are some cross-references that are relevant:

utmp/wtmp are gone, wtmpdb is opt-in and not recommended:
https://www.debian.org/releases/trixie/release-notes/issues.html#the-last-lastb-and-lastlog-commands-have-been-replaced

openssh/trixie has wtmpdb enabled:
https://www.openssh.com/txt/release-10.0#line=236
https://sources.debian.org/src/openssh/1%3A10.0p1-7/debian/rules#L90

the error message is where openssh calls logout(), which seems to be glibc updating utmp(5):
https://sources.debian.org/src/openssh/1%3A10.0p1-7/loginrec.c#L1480-L1500
https://manpages.debian.org/trixie/manpages-dev/logout.3.en.html
https://sourceware.org/glibc/manual/2.41/html_node/Logging-In-and-Out.html

I can't see anything in "man sshd_config" or in the code to let me disable this. I suspect "apt install wtmdb" is sufficient to make the log event go away, but
at the cost of doing needless work (doing a sqlite3 UPSERT on logout).
I have not yet tested this suspicion.


Reply to: