Can't w, who, lastlog, last. They all stopped logging.

[taotoon]

They all stopped logging. The wtmp hasn't been updated for a month.

/sbin/service syslog restart didn't work.

I tried to delete /var/log/wtmp and touch /var/log/wtmp.

I tried reboot.



openssl-devel.i586 0.9.7a-43.8 installed
openssl096b.i386 0.9.6b-22.42 installed
openssl.i686 0.9.7a-43.8 installed
openssl-perl.i586 0.9.7a-43.8 installed

openssh-clients.i386 3.9p1-8.RHEL4.12 installed
openssh-server.i386 3.9p1-8.RHEL4.12 installed
openssh.i386 3.9p1-8.RHEL4.12 installed

[taotoon]

-rw-rw-r-- 1 root utmp 3072 Jun 19 16:12 wtmp
-rw-rw-r-- 1 root utmp 6144 May 10 09:23 wtmp.1
-r-------- 1 root root 9345752 Apr 29 05:56 lastlog
-rw-rw-r-- 1 root utmp 1536 Jun 19 16:12 utmp

[hmobrien]

If you're using CentOS make sure 'UseLogin yes' is in your sshd_config file. If it's not add it and restart sshd. That should fix it.

[taotoon]

Wow! thank you very much.. it works!
By the way, ftp still didn't logging. Do you know how to fix ?

[taotoon]

I switch to proftpd and now logging...


root@vps [~]# last
root ttyp0 81.47.150.103 Fri Jun 23 08:21 still logged in
taotoon ftpd12024 225.128.106.190 Thu Jun 22 18:41 - 19:01 (00:19)
taotoon ftpd9696 225.128.106.190 Thu Jun 22 18:41 - 18:41 (00:00)
thnow ftpd3867 225.128.106.190 Thu Jun 22 18:40 - 18:41 (00:01)
taotoon ftpd1648 225.128.106.190 Thu Jun 22 18:39 - 18:40 (00:00)
thnow ttyp1 225.128.106.190 Thu Jun 22 18:01 - 18:23 (00:21)
root ttyp0 225.128.106.190 Thu Jun 22 18:00 - 00:54 (06:53)
reboot system boot 2.6.8-022stab070 Mon Jun 19 16:12 (3+16:10)

wtmp begins Mon Jun 19 16:12:29 2006