Hi,
Got 2 replies, both explaining it is not a security
issue, this gives me some comfort, what disturbes me
though, is that I cannot reproduce it!!!
It seems to happen "naturally", and checking lastcomm
around those times shows such things as:
Xsetup   S  root     __             0.02 secs Mon Oct
15 10:33
sh       S  root     __             0.01 secs Mon Oct
15 10:33
xrdb     S  root     __             0.03 secs Mon Oct
15 10:33
sh       S  root     __             0.01 secs Mon Oct
15 10:33
gemc_cc  S  root     __             0.02 secs Mon Oct
15 10:33
sh       S  root     __             0.01 secs Mon Oct
15 10:33
awk      S  root     __             0.02 secs Mon Oct
15 10:33
uptime   S  root     __             0.02 secs Mon Oct
15 10:33
If only I can reproduce it, I will be in peace.
--- Tyler Hall <tyler_h_at_bellsouth.net> wrote:
> This usually means that someone connects to this
> system from another system
> via another Xserver from a pc usually.. IE, Exceed,
> Excursion, ReflectionX,
> etc.. It is not a security breach, but just the way
> those connections show
> up.
> 
> Tyler
It's to do with CDE logins. I looked at this a while
back but couldn't
find much info. There was however no suggestion that
it's any risk. It 
appears
on any system using CDE.
CHeers
Joe
> 
> ----- Original Message -----
> From: "Need Help" <unixtipzz_at_yahoo.com>
> To: <tru64-unix-managers_at_ornl.gov>
> Sent: Monday, October 15, 2001 9:30 AM
> Subject: a summary for this?
> 
> 
> > Hi,
> > Anyone knows a solution to these postings?
> > No Summaries!
> > I am facing a similar Dilemma
> >
> >
> >
>
http://www.xray.mpe.mpg.de/cgi-bin/w3glimpse/tru64-unix-managers?query=LOGIN
> +dtremote&errors=0&case=on&maxfiles=100&maxlines=30
> >
> >
> >
>
http://www.xray.mpe.mpg.de/mailing-lists/tru64-unix-managers/1999-09/msg0022
> 9.html
> >
> >
> > Hi all,
> >         I have searched the archives for any
> summaries
> > on this but have
> > found none. All I can find is questions on this
> > subject. Could some one
> > explain why I might be seeing this type of login
> > information when I use the
> > "last" command. We don't  have and account named
> LOGIN
> > and who the heck is
> > dtremote.
> >
> > LOGIN     dtremote                      Wed Jan 12
> > 10:18   still logged in
> > LOGIN     dtremote                      Mon Jan 10
> > 13:26 - 10:17 (1+20:50)
> > LOGIN     dtremote                      Thu Jan 06
> > 12:55 - 13:10 (4+00:14)
> > LOGIN     dtremote                      Thu Jan 06
> > 03:16 - 05:39  (02:22)
> > LOGIN     dtremote                      Thu Jan 06
> > 01:59 - 03:16  (01:16)
> >
> > System Info:
> >         DEC Workstation 500au
> >         Tru64 version 4.0g
> >         WU-ftp version 2.5.0
> >
> >
> >
> > __________________________________________________
> > Do You Yahoo!?
> > Make a great connection at Yahoo! Personals.
> > http://personals.yahoo.com
> 
__________________________________________________
Do You Yahoo!?
Make a great connection at Yahoo! Personals.
http://personals.yahoo.com
Received on Mon Oct 15 2001 - 14:52:32 NZDT