openssh unix dev - Oct 2001 - "last" providing incorrect information on Solaris 8

I'm seeing a problem using OpenSSH v2.9.9p2 on solaris and the usage of
the "last" command.

The "last <username>" usage is displaying the sessions as still
being
logged on the server when it's really not.  The "last" by itself
shows
correct information about the session.     Sometimes using the "last
<username>" syntax  the session shows being terminated but the total
logged in time is hours off.
The console logins are not showing this behavior so Sun Support has been
difficult to get answers on the differences why I'm seeing this strange
behavior.   Sun Support had me apply latest "last" patches and start a
new /var/adm/wtmpx file.     I'm not understanding the tie in between
Solaris OS usage of the wtmpx file and OpenSSH.

I was using OpenSSH v2.5.2p2.  After upgrading and using the pam module
I'm still seeing this problem.   Can some else using Solairs verify this
strange behavior or verify it's a possible bug in OpenSSH?

$ last
fish  pts/4        r2-040.dhcp.in Mon Oct 29 13:47 - 13:47  (00:00)
fish  pts/2        r2-040.dhcp.in Mon Oct 29 12:43   still logged in
fish  console                       Mon Oct 29 12:14 - 12:15  (00:00)
fish  console                       Mon Oct 29 12:12 - 12:14  (00:02)

$ last fish
fish  pts/4        r2-040.dhcp.in Mon Oct 29 13:47   still logged in
fish  pts/2        r2-040.dhcp.in Mon Oct 29 12:43   still logged in
fish  console                       Mon Oct 29 12:14 - 12:15  (00:00)
fish  console                       Mon Oct 29 12:12 - 12:14  (00:02)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: sfishback.vcf
Type: text/x-vcard
Size: 285 bytes
Desc: Card for Steven Fishback
Url :
http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20011030/cc5b6316/attachment.vcf

Steven Fishback said the following on Tue, Oct 30, 2001 at 09:15:11AM -0500,
> I was using OpenSSH v2.5.2p2.  After upgrading and using the pam module
> I'm still seeing this problem.   Can some else using Solairs verify
this
> strange behavior or verify it's a possible bug in OpenSSH?
 
I'm a user on a Solaris 8 system where this behaviour is being observed.  I
don't know if OpenSSH was being investigated as a possible cause, but it
fits with your observations.

Version string is SSH-1.99-OpenSSH_2.9p2

-- 
ejrry^[bxpZZ

>The "last <username>" usage is displaying the sessions as
still being
>logged on the server when it's really not.  The "last" by
itself shows
>correct information about the session.     Sometimes using the "last
><username>" syntax  the session shows being terminated but the
total
>logged in time is hours off.

See the following Sun bugs in SunSolve:

1.  "last" problem - wtmpx entries not properly updated when logging
out
    Bug:  1171613
2.  wtmpx entries not properly updated when logging out
    Bug:  4027052
3.  *last* produces inconsistent results when specifying name.
    Bug:  4010009
4.  *last* The last command does not show ftp sessions if using a name
    Bug:  4095482
5.  last command shows still logged on when user is logged out
    Bug:  4119214
6.  *last* last command does not show correct-logout time (ftp login)
    Bug:  1260759


I believe these are releated to the problem you are seeing.
    
--
Darren J Moffat