On Wed, 15 Jun 2005, Chuck Hast wrote:
> On 6/15/05, Eben King <eben1@tampabay.rr.com> wrote:
> > On Wed, 15 Jun 2005, Chuck Hast wrote:
> >
> > > Here is a who -u
> > > root@fpac:/etc/ax25# who -u
> > ...
> > > fpacuser pts/1 Jun 15 07:54 . 1419
> >
> > > Below is the "ps axfww | less -S"
> > > root@fpac:/etc/ax25# ps axfww
> > > PID TTY STAT TIME COMMAND
> > ...
> > > 254 ? S 0:00 /usr/sbin/sshd
> > > 1576 ? S 0:00 \_ sshd: root@pts/1 <---
> > > 1578 pts/1 S 0:00 \_ -bash
> > > 1652 pts/1 R 0:00 \_ ps axfww
> >
> > Are these from the same login session?
> >
> > You also need to mind out what _is_ being run when fpacuser SSHes in ("echo
> > $$" etc).
> >
> OK, one thing, I am ssh'ing into this machine as it is over in Ft Pierce.
> The guy who operates it is not that hot on Linux yet so I am doing all
> of this remotely.
That adds a degree of difficulty, true. It's nowhere near as hard or
insecure as some other OSes.
> I assume that I need to be on a console and when the login to fpacuser
> happens I need to do the echo $$...
No, because that'll tell you the PID of _your_ shell. It needs to be run by
the user with the problem. Except...
> Only thing is as soon as you do the password it kills the whole thing,
Try SSHing in as fpacuser from a concole, or some terminal that doesn't
close as soon as ssh exits. There might be some useful message like "cannot
find <something>" that prints just before ssh exits.
> there is the one that sets around as you can see from the 'who -u' but I
> can not find out anything else the pid that is shown by the who command
> appears not to exist.
[uw]tmp is messed up?
See if you can run:
ssh fpacuser@that_host what_it's_supposed_to_run
-- -eben ebQenW1@EtaRmpTabYayU.rIr.OcoPm home.tampabay.rr.com/hactar SAGITTARIUS: All your friends are laughing behind your back... kill them. Take down all those naked pictures of Ernest Borgnine you've got hanging in your den. -- Weird Al, _Your Horoscope for Today_----------------------------------------------------------------------- This list is provided as an unmoderated internet service by Networked Knowledge Systems (NKS). Views and opinions expressed in messages posted are those of the author and do not necessarily reflect the official policy or position of NKS or any of its employees.
This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 20:12:33 EDT