LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Other *NIX Forums > AIX
User Name
Password
AIX This forum is for the discussion of IBM AIX.
eserver and other IBM related questions are also on topic.

Notices

Reply
 
Search this Thread
Old 05-22-2004, 10:17 PM   #1
zepplin611
Member
 
Registered: Jan 2004
Distribution: AIX 4.3 RH 7,8,9 / Fedora C1/
Posts: 187

Rep: Reputation: 30
stale users on AIX 4.3.3 RS/6000


AIX'ers,

I have an rs/6000 running aix 4.3.3 that is listing stale/not wanted users when I type the command: who

Now, this machine underwent some maintenance earlier today to update the version of secure shell, but I still see users logged in with tty's that seem to be stale.

output from 'who':


user ttype May 22 18:46 (XX.XX.XX.XXX)
user ttypf May 22 18:46 (XX.XX.XX.XXX)
user ttyq0 May 22 18:46 (XX.XX.XX.XXX)
user ttyq1 May 22 18:46 (XX.XX.XX.XXX)


How would I manually boot this user off (assuming i have the root password, which i do)?? I am positive that this user is not in the middle of any activity and I want to avoid rebooting the entire machine for obvious downtime issues.

Thanks!

zepplin611
 
Old 05-22-2004, 10:59 PM   #2
looseCannon
Member
 
Registered: Dec 2003
Location: Little Rock, AR
Distribution: Fedora Core 2, AIX, HP-UX, Solaris, Whitebox
Posts: 193

Rep: Reputation: 31
Try doing a 'ps -ef|grep ksh' (substitute what ever shell you are using for ksh if different). You'll have to weed through the result and get the process ID for their shell. You can then kill the session with a standard 'kill' command. Tack on a -9 if you are really malicious.
 
Old 05-22-2004, 11:04 PM   #3
zepplin611
Member
 
Registered: Jan 2004
Distribution: AIX 4.3 RH 7,8,9 / Fedora C1/
Posts: 187

Original Poster
Rep: Reputation: 30
thanks loose cannon...

the issue isn't that i can't kill the pid's its that they aren't listed....ps -ef|grep ksh provides no
corresponding pid's for these users...it seems they exist w/o pid's...is this possible?
 
Old 05-22-2004, 11:10 PM   #4
looseCannon
Member
 
Registered: Dec 2003
Location: Little Rock, AR
Distribution: Fedora Core 2, AIX, HP-UX, Solaris, Whitebox
Posts: 193

Rep: Reputation: 31
Run 'top' and look for the number of zombie processes. I've seen this before when a user's session IS a zombie process. If this is the case then the only correction is to reboot the system, or live with it.
 
Old 05-23-2004, 04:48 PM   #5
zepplin611
Member
 
Registered: Jan 2004
Distribution: AIX 4.3 RH 7,8,9 / Fedora C1/
Posts: 187

Original Poster
Rep: Reputation: 30
enclosed is the output from top:

machine load averages: 0.06, 0.08, 0.06 Sun May 23 16:50:22 2004
Cpu states: 0.0% user, 0.0% system, 0.0% wait, 100.0% idle
Real memory: 4193998.5M used, 305.6M free, 0.1M total
Virtual memory: 204.8M used, 0.0M free, 204.8M total


no-where does it state anything about zombie processes, as top typically does in linux.
It seemingly appears that the login's could be zombie processes...but is there anything I can check to positively identify these as such??
thanks!
 
Old 05-25-2004, 07:46 AM   #6
Sten
LQ Newbie
 
Registered: Apr 2004
Posts: 5

Rep: Reputation: 0
Hi
If you know which users you want to kick out , why dont you just run ps -ef|grep USERNAME and kill the ksh processes that they have?
You may have problems if the process refuses to die, which may happen.
good luck
 
Old 05-25-2004, 11:12 AM   #7
Mark Taylor
Member
 
Registered: Apr 2004
Posts: 60

Rep: Reputation: 15
why dont you download and install "idled" daemon to do this for you in the future.

http://www.darkwing.com/idled/

HTH
Mark
 
Old 05-25-2004, 12:12 PM   #8
zepplin611
Member
 
Registered: Jan 2004
Distribution: AIX 4.3 RH 7,8,9 / Fedora C1/
Posts: 187

Original Poster
Rep: Reputation: 30
Re: sten's suggestion --> there aren't any associated pid's with a ps stmt...see the above posts.

Re: Mark's suggestion --> I spose this could work, but i would rather reboot the machine and have this fixed that way, than install unneeded software that carries with it, its own security concerns...

thanks though...i think a reboot is all that is left.

zepplin611
 
Old 05-26-2004, 05:26 AM   #9
zorba4
Member
 
Registered: Feb 2004
Location: Paris
Posts: 398

Rep: Reputation: 31
Sorry, Zepplin, I was sleeping, I didn't see your post.
The answer is simple.
Type "who -u" instead of "who".
You will see the connected user and the PID of the father shell of each user.
Just kill -9 the PID appearing at the left (just before the system noame) and the user will be kicked out !
Regards
Zorba
 
Old 07-16-2008, 02:37 AM   #10
amol_pali
LQ Newbie
 
Registered: Jul 2008
Posts: 1

Rep: Reputation: 0
Smile

Hi zorba4,
Thanks for the post.
It really helped me.
 
Old 12-21-2009, 05:59 AM   #11
enrique5020
LQ Newbie
 
Registered: Dec 2009
Posts: 1

Rep: Reputation: 0
Please Try this

# who
root lft0 Dec 21 06:52
root pts/0 Dec 21 06:52 (:0.0)
root pts/1 Dec 21 06:52 (:0.0)
user1 pts/2 Dec 21 10:23 (172.10.1.115)
user2 pts/3 Dec 21 11:55 (172.10.1.115)
# ps -ef | grep pts/3
user2 708610 847872 0 11:55:29 pts/3 0:00 -ksh
# kill -9 708610
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
AIX on IBM RS/6000 hangs on boot potkuri AIX 11 06-18-2007 02:56 PM
AIX for RS/6000 7043-240 TimP AIX 5 03-26-2005 11:30 AM
Old School AIX on a newer RS/6000? NOTORIOUS VR AIX 17 02-15-2005 10:28 AM
AIX 5.2 install on RS/6000 140 Pseries intianjum AIX 2 11-24-2004 03:27 PM
Curious open port on AIX 4.3.3 - RS/6000 zepplin611 AIX 7 10-07-2004 11:00 PM


All times are GMT -5. The time now is 04:54 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration