Re: commands w who finger

2005-06-15 Thread Lowell Gilbert
Dixit, Viraj [EMAIL PROTECTED] writes:

 Anyone got an idea why any of these commands w who  finger do
 not show who is logged in. I am logged in as a super user and shows
 no one logged in. The commands used to work few days ago now
 nothing. Thanks for the help.

Did you change anything?
How are the various users logged in?  Via ssh?  On the console?  xterms?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: commands w who finger

2005-06-15 Thread Dixit, Viraj
No nothing was changed as far as I know. I usually log on as a super user 
through telnet and there are few others that I have also given access to as a 
super user. I have not tried the console yet, but what am I looking for. Thanks,
VJ

 -Original Message-
From:   [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]  On Behalf Of Lowell Gilbert
Sent:   Wednesday, June 15, 2005 8:06 AM
To: Dixit, Viraj
Cc: freebsd-questions@freebsd.org
Subject:Re: commands w who  finger

Dixit, Viraj [EMAIL PROTECTED] writes:

 Anyone got an idea why any of these commands w who  finger do
 not show who is logged in. I am logged in as a super user and shows
 no one logged in. The commands used to work few days ago now
 nothing. Thanks for the help.

Did you change anything?
How are the various users logged in?  Via ssh?  On the console?  xterms?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: commands w who finger

2005-06-15 Thread Danny
On 6/14/05, Dixit, Viraj [EMAIL PROTECTED] wrote:
 Hi,
 
 Anyone got an idea why any of these commands w who  finger do not show 
 who is
 logged in. I am logged in as a super user and shows no one logged in. The 
 commands used
 to work few days ago now nothing. Thanks for the help.

The binaries could have been modified by anyone permitted (or not
permitted; script kiddie) to do so?

...D
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: commands w who finger

2005-06-15 Thread Dixit, Viraj
What's the solution, do I need to rebuid some process or rebooting might solve 
it. Thanks!!

 -Original Message-
From:   Danny [mailto:[EMAIL PROTECTED] 
Sent:   Wednesday, June 15, 2005 8:31 AM
To: Dixit, Viraj
Cc: freebsd-questions@freebsd.org
Subject:Re: commands w who  finger

On 6/14/05, Dixit, Viraj [EMAIL PROTECTED] wrote:
 Hi,
 
 Anyone got an idea why any of these commands w who  finger do not show 
 who is
 logged in. I am logged in as a super user and shows no one logged in. The 
 commands used
 to work few days ago now nothing. Thanks for the help.

The binaries could have been modified by anyone permitted (or not
permitted; script kiddie) to do so?

...D
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: commands w who finger

2005-06-15 Thread Danny
On 6/15/05, Dixit, Viraj [EMAIL PROTECTED] wrote:
 What's the solution, do I need to rebuid some process or rebooting might 
 solve it. Thanks!!

Assuming I am on the right track (off to a good start - we are!), you
could perform a forensic analysis:

http://www.l0t3k.org/security/tools/forensic/

...and/or copy the binary(ies) from a repair/live FreeBSD CD.

I am not an expert in this, so there will be others with better advice.

...D
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: commands w who finger

2005-06-15 Thread Greg Barniskis

Dixit, Viraj wrote:

No nothing was changed as far as I know. I usually log on as a super user 
through telnet and there are few others that I have also given access to as a 
super user. I have not tried the console yet, but what am I looking for. Thanks,


Urk. squirm

Logging in via telnet exposes your password in cleartext. If it 
wasn't another 'authorized' superuser who changed things, it could 
easily be that you've been cracked six ways from Sunday.


You should definitely reinstall from CD. It is very strongly 
recommended that you *always use SSH* for remote login, and that you 
don't give blanket superuser privileges to others -- give them 
discrete added privileges with sudo, and/or sink their accounts into 
a jail environment.


--
Greg Barniskis, Computer Systems Integrator
South Central Library System (SCLS)
Library Interchange Network (LINK)
gregb at scls.lib.wi.us, (608) 266-6348
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


commands w who finger

2005-06-14 Thread Dixit, Viraj
Hi,

Anyone got an idea why any of these commands w who  finger do not show 
who is logged in. I am logged in as a super user and shows no one logged in. 
The commands used to work few days ago now nothing. Thanks for the help.
VJ

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]