[ale] passwd, who, and last issues...

[Enderby]

First question is what happened to the archived online lists of these
mailing lists they seem to stop after January of 1999?  Is RedHat going to
stop archiving these?

Now down to the real problems at hand.  I looked through the archives but
was not able to find this so hopefully these are not dumb questions..

BACKGROUND:

Was running 4.2 with 2.0.36, upgraded to 5.2 with 2.0.36 on two
different boxes (a pentium 130, and a cyrix MMX200) with same kernel
builds and fresh installs with minimum upgrades and now have these
problems: (NOTE: the 2.0.36 kernel was built on one of the 5.2 boxes with
the secure patch)

#1: "last" shows:

*****                                  Wed Dec 31 19:00 - 19:00  (00:00)
~o       ***7majordom                  Wed Dec 31 19:00   still logged in
slave.xp *            3                Wed Dec 31 19:00   still logged in

etc.. I heard somone mentioning about a re-compile although the ONLY
changes that have been made from the FRESH install is NFS and FTP rpm
upgrades.  So if a compile was needed why was it not compiled with the
distribution?

#2: "passwd" does not work, it tries to change the password of another
user (and I am not 'su'ing like some of the other messages talk about).  I
ssh into the box as a user type 'passwd' and it says "changing password
for USER", except USER does not equal the user I logged into as.

example:

[chuck at mybox chuck]$ passwd
Changing password for joebob
(current) UNIX password: 

#3: "who" shows stuff like this:

user1    ttyp0    Apr 16 21:32 (host-101)
user1    ttyp0    Apr 16 21:35 (host-101)
user2    ttyp1    Apr 16 21:35 (host-209)
user1    ttyp2    Apr 16 21:36 (host-101)
user3    ttyp3    Apr 16 21:36 (hosts-1035)
user1    ttyp0    Apr 16 21:44 (host-101)
user4    ttyp2    Apr 16 21:48 (host-210)
user5    ttyp0    Apr 16 22:12 (host-218)
user6    ttyp0    Apr 16 22:12 (host-220)

NOTE: I substitued "user1" for "user name #1" and (host-101) for a
specific host just for a bit of privacy.

THE PROBLEM THERE IS: how is it possible for multiple users to be on the
same port? And many of these connections do not exist via 'netstat -tn',
so they seems bogus and not correct.  The "who" also differs from the "w".
Here is the "w" output:

 12:31am  up  3:00, 18 users,  load average: 0.03, 0.28, 0.24
USER     TTY      FROM              LOGIN@   IDLE   JCPU   PCPU  WHAT
user1    ttyp3    103ppp126.mpinet 12:10am 14.00s 20.98s  0.06s  screen 
user2    ttyp4    ppp22            12:12am  4:08   0.67s  0.67s  -bash 
user2    ttyp5    ppp22            12:25am 26.00s  1.75s  0.06s  screen -r 

This is correct EXCEPT that it says 18 users and as you can see only 2 are
online.  The "w" seems to work fine.

Any help of this would be greatly appreciated.

Thanks,

Russell