lastlog shows **Never logged in** (in last/wtmp my logins visable)

Bug #271049 reported by sjolle on 2008-09-16
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
shadow (Ubuntu)
Medium
Unassigned

Bug Description

lastlog doesn't work

additionally there is a false positive with chkrootkit:

user sjolle deleted or never logged from lastlog!

# ls -ald wtmp lastlog
-rw-rw-r-- 1 root utmp 292292 2008-09-05 15:10 lastlog
-rw-rw-r-- 1 root utmp 115968 2008-09-16 21:51 wtmp

# lastlog | grep sjolle
sjolle **Never logged in**

# last | head -n 20
sjolle pts/0 :0.0 Tue Sep 16 21:51 still logged in
sjolle pts/0 :0.0 Tue Sep 16 20:38 - 20:41 (00:02)
sjolle pts/3 :0.0 Tue Sep 16 19:25 - 20:14 (00:48)
sjolle pts/2 :0.0 Tue Sep 16 19:25 still logged in
sjolle pts/1 :0.0 Tue Sep 16 19:25 still logged in
sjolle pts/0 :0.0 Tue Sep 16 19:25 - 20:13 (00:48)
sjolle tty7 :0 Tue Sep 16 19:25 still logged in
reboot system boot 2.6.24-19-generi Tue Sep 16 18:50 - 22:00 (03:09)
sjolle pts/3 :0.0 Mon Sep 15 21:02 - 22:11 (01:09)
sjolle pts/2 :0.0 Mon Sep 15 21:02 - 22:11 (01:09)
sjolle pts/1 :0.0 Mon Sep 15 21:02 - 22:11 (01:09)
sjolle pts/0 :0.0 Mon Sep 15 21:02 - 22:11 (01:09)
sjolle tty7 :0 Mon Sep 15 20:57 - 22:11 (01:13)
reboot system boot 2.6.24-19-generi Mon Sep 15 20:57 - 22:11 (01:13)
sjolle pts/3 :0.0 Sat Sep 13 11:22 - 00:35 (1+13:13)
sjolle pts/2 :0.0 Sat Sep 13 11:22 - 00:35 (1+13:13)
sjolle pts/1 :0.0 Sat Sep 13 11:22 - 00:35 (1+13:13)
sjolle pts/0 :0.0 Sat Sep 13 11:22 - 20:50 (09:28)
sjolle tty7 :0 Sat Sep 13 11:21 - 00:35 (1+13:13)
reboot system boot 2.6.24-19-generi Sat Sep 13 11:21 - 00:35 (1+13:14)

please request additonal infos if needed

Daniel Hahler (blueyed) wrote :

Re-assigning to the "login" package, where "lastlog" comes from.

Apart from that: is this still an issue? Have you tried it on the latest release (Ubuntu Lucid currently)?
For what it's worth, I cannot confirm this on a Lucid based system.

Changed in shadow (Ubuntu):
importance: Undecided → Medium
status: New → Incomplete
Launchpad Janitor (janitor) wrote :

[Expired for shadow (Ubuntu) because there has been no activity for 60 days.]

Changed in shadow (Ubuntu):
status: Incomplete → Expired
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers