[Pkg-shadow-devel] Bug#603234: Bug#603234: [login] lastlog's login dates older than actual last login dates

Filipus Klutiero chealer at gmail.com
Tue Nov 16 03:29:26 UTC 2010

  On 2010-11-15 17:07, Nicolas François wrote:
> Hello,
> On Thu, Nov 11, 2010 at 10:27:28PM -0500, chealer at gmail.com wrote:
>> lastlog shows login dates older than the actual last login dates, at
>> least for the 2 "users" on this system, "chealer" and "bacon", and
>> root:
> [...]
> Are you sure that lastlog is failing to report entries from
> /var/log/lastlog or is it a problem with the login program you use that do
> not report logins in /var/log/lastlog?
Neither. I never wrote that lastlog is failing to report entries from 
/var/log/lastlog, its login dates are just older than actual last login 
dates. There is also no single login program that I use. I use at least 
kdm (KDE) to login to X :0 and su to login as root (from konsole).
> Can you check the date of the /var/log/lastlog file after one of your user
> as logged in?
$ stat /var/log/lastlog
   File: « /var/log/lastlog »
   Size: 292584          Blocks: 40         IO Block: 4096   fichier
Device: 805h/2053d      Inode: 8364092     Links: 1
Access: (0664/-rw-rw-r--)  Uid: (    0/    root)   Gid: (   43/    utmp)
Access: 2010-11-11 21:54:47.000000000 -0500
Modify: 2010-11-05 15:46:53.000000000 -0400
Change: 2010-11-05 15:46:53.000000000 -0400
chealer at vinci:~$

So lastlog didn't change since 10 days.

More information about the Pkg-shadow-devel mailing list