lastlog shows **Never logged in** (in last/wtmp my logins visable)

[sjolle]

lastlog doesn't work

additionally there is a false positive with chkrootkit:

user sjolle deleted or never logged from lastlog!

# ls -ald wtmp lastlog
-rw-rw-r-- 1 root utmp 292292 2008-09-05 15:10 lastlog
-rw-rw-r-- 1 root utmp 115968 2008-09-16 21:51 wtmp

# lastlog | grep sjolle
sjolle **Never logged in**

# last | head -n 20
sjolle pts/0 :0.0 Tue Sep 16 21:51 still logged in
sjolle pts/0 :0.0 Tue Sep 16 20:38 - 20:41 (00:02)
sjolle pts/3 :0.0 Tue Sep 16 19:25 - 20:14 (00:48)
sjolle pts/2 :0.0 Tue Sep 16 19:25 still logged in
sjolle pts/1 :0.0 Tue Sep 16 19:25 still logged in
sjolle pts/0 :0.0 Tue Sep 16 19:25 - 20:13 (00:48)
sjolle tty7 :0 Tue Sep 16 19:25 still logged in
reboot system boot 2.6.24-19-generi Tue Sep 16 18:50 - 22:00 (03:09)
sjolle pts/3 :0.0 Mon Sep 15 21:02 - 22:11 (01:09)
sjolle pts/2 :0.0 Mon Sep 15 21:02 - 22:11 (01:09)
sjolle pts/1 :0.0 Mon Sep 15 21:02 - 22:11 (01:09)
sjolle pts/0 :0.0 Mon Sep 15 21:02 - 22:11 (01:09)
sjolle tty7 :0 Mon Sep 15 20:57 - 22:11 (01:13)
reboot system boot 2.6.24-19-generi Mon Sep 15 20:57 - 22:11 (01:13)
sjolle pts/3 :0.0 Sat Sep 13 11:22 - 00:35 (1+13:13)
sjolle pts/2 :0.0 Sat Sep 13 11:22 - 00:35 (1+13:13)
sjolle pts/1 :0.0 Sat Sep 13 11:22 - 00:35 (1+13:13)
sjolle pts/0 :0.0 Sat Sep 13 11:22 - 20:50 (09:28)
sjolle tty7 :0 Sat Sep 13 11:21 - 00:35 (1+13:13)
reboot system boot 2.6.24-19-generi Sat Sep 13 11:21 - 00:35 (1+13:14)

please request additonal infos if needed

[Daniel Hahler (blueyed)]

Re-assigning to the "login" package, where "lastlog" comes from.

Apart from that: is this still an issue? Have you tried it on the latest release (Ubuntu Lucid currently)?
For what it's worth, I cannot confirm this on a Lucid based system.

[Launchpad Janitor (janitor)]

[Expired for shadow (Ubuntu) because there has been no activity for 60 days.]