Finding out login history

Finding out login history

[Ronald Fischer]

Is it possible to find out the login history, i.e. the exact time on the
previous days a user has logged on, respectively the system has been rebooted
(though these times are not the same, in my case I would be happy getting either
one)?

I know that from the data displayed by 'uptime', I can calculate the 
time since when the PC is running now, but I would also find the time of
the previous system startups or user logins.

Maybe this is recorded in /var/run/utmp (at least uptime gets is information
from there), but I don't know whether this records the history, and it is a
binary file anyway.

Ronald



--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

RE: Finding out login history

[Morche Matthias]

Hi Ronald,

try "last", that provides the information, you are looking for.

  matthias


 

> -----Original Message-----
> From: cygwin-owner@cygwin.com 
> [mailto:cygwin-owner@cygwin.com] On Behalf Of Ronald Fischer
> Sent: Monday, January 19, 2009 9:07 AM
> To: cygwin@cygwin.com
> Subject: Finding out login history
> 
> Is it possible to find out the login history, i.e. the exact 
> time on the
> previous days a user has logged on, respectively the system 
> has been rebooted

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: Finding out login history

[Ronald Fischer]

Morche Matthias <Matthias.Morche <at> P7S1Produktion.de> writes:
> try "last", that provides the information, you are looking for.

Thank you for helping. Which package do I have to install, to 
have 'last' available?

mucn13154:~ 1 505 $ man last
No manual entry for last
mucn13154:~ 1 506 $ last
bash: last: command not found




--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: Finding out login history

[Andy Koppe]

> Thank you for helping. Which package do I have to install, to
> have 'last' available?

util-linux

For future reference: http://cygwin.com/packages/

Andy

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: Finding out login history

[Ronald Fischer]

Andy Koppe <andy.koppe <at> gmail.com> writes:

> > Thank you for helping. Which package do I have to install, to
> > have 'last' available?
> 
> util-linux

Thanks a lot!

> For future reference: http://cygwin.com/packages/

The problem with this page is that if you search the packages for
"last", you get 140+ matches, where it is easy to overlook the right
one ;-) But thank you for pointing this out.

Ronald







--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: Finding out login history

[Ronald Fischer]

Andy Koppe <andy.koppe <at> gmail.com> writes:

> > Thank you for helping. Which package do I have to install, to
> > have 'last' available?
> 
> util-linux

Rerunning setup.exe, it showed me that I *did* have util-linux
installed; even the most recent version. Is "last" supposed to
be in /bin or in some other directory?

BTW I tried to reinstall, but reinstallation hung after 31% completion.
Seems that today is not my day.

Ronald





--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: Finding out login history

[Andy Koppe]

> Rerunning setup.exe, it showed me that I *did* have util-linux
> installed; even the most recent version. Is "last" supposed to
> be in /bin or in some other directory?

Hmm, same problem here actually. According to the package search it
should be there though. (Btw, searching for 'last.exe' narrows down
the list of hits.)

    Fri Jan 25 05:39:06 2008           8704 usr/bin/last.exe

Andy

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: Finding out login history

[Dave Korn]

Thrall, Bryan wrote:

>
> Perhaps we have a conflict here?


  http://www.cygwin.com/ml/cygwin/2008-02/msg00272.html

and followup thread at

  http://www.cygwin.com/ml/cygwin-apps/2008-02/threads.html#00084

    cheers,
      DaveK

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

RE: Finding out login history

[Thrall, Bryan]

Andy Koppe wrote on Monday, January 19, 2009 9:22 AM:

>> Rerunning setup.exe, it showed me that I *did* have util-linux
>> installed; even the most recent version. Is "last" supposed to
>> be in /bin or in some other directory?
> 
> Hmm, same problem here actually. According to the package search it
> should be there though. (Btw, searching for 'last.exe' narrows down
> the list of hits.)
> 
>     Fri Jan 25 05:39:06 2008           8704 usr/bin/last.exe
> 
> Andy

Interestingly, last.exe is also in sysvinit:

thrall@pc1163-8413-xp ~/clouddev/visual
$ cygcheck -f /bin/last.exe
sysvinit-2.86-3
thrall@pc1163-8413-xp ~/clouddev/visual
$ cygcheck -l util-linux | grep last
thrall@pc1163-8413-xp ~/clouddev/visual
$ cygcheck -l util-linux | less     
thrall@pc1163-8413-xp ~/clouddev/visual
$ cygcheck -cd util-linux
Cygwin Package Information
Package              Version
util-linux           2.13.1-2

And, as reported on http://www.cygwin.com/packages: (sysvinit-2.86-3)

Tue Apr  1 07:55:52 2008          12288 usr/bin/last.exe

Perhaps we have a conflict here?
-- 
Bryan Thrall
FlightSafety International
bryan.thrall@flightsafety.com

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: Finding out login history

[Dave Korn]

Ronald Fischer wrote:
> Andy Koppe <andy.koppe <at> gmail.com> writes:
>> For future reference: http://cygwin.com/packages/
>
> The problem with this page is that if you search the packages for
> "last", you get 140+ matches, where it is easy to overlook the right
> one ;-) But thank you for pointing this out.

  You can use path substrings and regexes, so since you're looking for an
executable, you could search for "last.exe" or "bin/last".

    cheers,
      DaveK

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: Finding out login history

[Dave Korn]

  BTW, there has already been a 2.13.1-2 release of util-linux and it has
removed last.exe - which is why it doesn't show up on the package search when
you're looking for last!

    cheers,
      DaveK

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

RE: Finding out login history

[Marco Atzeri]

--- "Thrall, Bryan"  ha scritto:

> Andy Koppe wrote on Monday, January 19, 2009 9:22
> AM:
> 
> >> Rerunning setup.exe, it showed me that I *did*
> have util-linux
> >> installed; even the most recent version. Is
> "last" supposed to
> >> be in /bin or in some other directory?

last is not in the current version of
util-linux  2.13.1-2
but it was in the previous version 2.13.1-1

The right package is
sysvinit             2.86-3


> > 
> > Hmm, same problem here actually. According to the
> package search it
> > should be there though. (Btw, searching for
> 'last.exe' narrows down
> > the list of hits.)
> > 
> >     Fri Jan 25 05:39:06 2008           8704
> usr/bin/last.exe
> > 
> > Andy
> 
> Interestingly, last.exe is also in sysvinit:
> 
> thrall@pc1163-8413-xp ~/clouddev/visual
> $ cygcheck -f /bin/last.exe
> sysvinit-2.86-3
> thrall@pc1163-8413-xp ~/clouddev/visual
> $ cygcheck -l util-linux | grep last
> thrall@pc1163-8413-xp ~/clouddev/visual
> $ cygcheck -l util-linux | less     
> thrall@pc1163-8413-xp ~/clouddev/visual
> $ cygcheck -cd util-linux
> Cygwin Package Information
> Package              Version
> util-linux           2.13.1-2
> 
> And, as reported on http://www.cygwin.com/packages:
> (sysvinit-2.86-3)
> 
> Tue Apr  1 07:55:52 2008          12288
> usr/bin/last.exe
> 
> Perhaps we have a conflict here?

already solved I assume :-)

> -- 
> Bryan Thrall

Marco


      

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

RE: Finding out login history

[Thrall, Bryan]

Dave Korn wrote on Monday, January 19, 2009 9:45 AM:
> Thrall, Bryan wrote:
>> Perhaps we have a conflict here?
> 
>   http://www.cygwin.com/ml/cygwin/2008-02/msg00272.html
> 
> and followup thread at
> 
>   http://www.cygwin.com/ml/cygwin-apps/2008-02/threads.html#00084
> 
>     cheers,
>       DaveK

D'oh, I figured that out after I hit send. Thanks for setting it
straight for me :)

-- 
Bryan Thrall
FlightSafety International
bryan.thrall@flightsafety.com

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: Finding out login history

[Ronald Fischer]

Marco Atzeri <marco_atzeri <at> yahoo.it> writes:
OK, now I finally have 'last', there is a usage problem:

mucn13154:~ 1 501 $ last
last: /var/log/wtmp: No such file or directory
Perhaps this file was removed by the operator to prevent logging last info.
mucn13154:~ 1 503 $ ls -l /var/log
total 6031
-rw-r--r--  1 fischron mkgroup-l-d       0 Dec 16 10:31 cron.log
drwxrwxrwx+ 2 SYSTEM   root              0 Jan 20 15:02 exim
-rwxrwxrwx+ 1 fischron mkgroup-l-d  285562 Jan 20 15:08 setup.log
-rwxrwxrwx+ 1 fischron mkgroup-l-d 5889080 Jan 20 15:08 setup.log.full

Seems as if I am out of luck here....


Ronald



--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: Finding out login history

[Marco Atzeri]

--- Ronald Fischer ha scritto:

> Marco Atzeri   writes:
> OK, now I finally have 'last', there is a usage
> problem:
> 
> mucn13154:~ 1 501 $ last
> last: /var/log/wtmp: No such file or directory
> Perhaps this file was removed by the operator to
> prevent logging last info.
> mucn13154:~ 1 503 $ ls -l /var/log
> total 6031
> -rw-r--r--  1 fischron mkgroup-l-d       0 Dec 16
> 10:31 cron.log
> drwxrwxrwx+ 2 SYSTEM   root              0 Jan 20
> 15:02 exim
> -rwxrwxrwx+ 1 fischron mkgroup-l-d  285562 Jan 20
> 15:08 setup.log
> -rwxrwxrwx+ 1 fischron mkgroup-l-d 5889080 Jan 20
> 15:08 setup.log.full
> 
> Seems as if I am out of luck here....
> 
> 
> Ronald
> 

RTFM

man last


NOTES
The files wtmp and btmp might not be found. 
The system only logs infor-mation  in  these 
files if they are present. This is a local 
configura-tion issue. If you want the files to be
used, they can be created  with a simple touch(1)
command (for example, touch /var/log/wtmp).


Cheers from NXP
Marco



      

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: Finding out login history

[Ronald Fischer]

Marco Atzeri <marco_atzeri <at> yahoo.it> writes:
> RTFM
> 
> man last

> touch /var/log/wtmp

uh - thanks!

Ronald



--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: Finding out login history

[anand]

I am using cygwin and i am executing last command on it its showing error msg
 Can't exec "last": No such file or directory at p.pl line 4.




--
Sent from: http://cygwin.1069669.n5.nabble.com/Cygwin-list-f3.html

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple