acctcon error...

arfon · 04-07-2015, 03:47 AM

In /var/adm/acct/nite/log

I have:
acctcon: bad times: old: Mon Apr 6 03:38:37 2015
new: Mon Apr 6 03:15:40 2015
acctcon: bad times: old: Mon Apr 6 23:44:20 2015
new: Mon Apr 6 23:44:19 2015

What in the world does this mean? How do I clear it?

I can't find any explanation in the acctcon man page or Oracle's site.

jlliagre · 04-07-2015, 03:36 PM

Your system clock might have gone backwards a couple of times. Are you using NTP on your server?

arfon · 04-10-2015, 04:51 AM

Yes, this machine is using an NPT server (along with ~1999 other machines).

It does say that it is 1 second off but how could it tell that?

We get this message everyday at 2:30am from this cron job:
adm:30 2 * * * /usr/lib/acct/runacct 2> /var/adm/acct/nite/fd2log

I'm not even sure what runacct does...

Any idea how to fix?

jlliagre · 04-10-2015, 07:45 AM

The first message states almost a 23 minutes discrepancy.

You might want to fix the wtmp file with the wtmpfix command.

Is your machine up to date with patches? What Solaris release/update is it running?