User logs

[SC92]

Hello all,

 

Bit of a peculiar one here. Basically we've had our sysadmin account logged into SEEMINGLY by a student. Just wanted to know if there was an option to check the time the user account was logged IN, rather than logged OUT. Only reason I ask is I went down to the room and physically made the student log out of the admin account, so the time logged out doesn't help us at all as it was me that forced it. We're using 10.6.8 if that makes any difference.

[Flakes]

just check the computer log it should give a log in time and the account. Control Panel > admin tools

[SC92]

Control panel doesn't exist in OSX?!

[SYNACK]

I'm assuming 10.6 is not the latest one. If it is then there was a security flaw where OSX simply did not check the password of any user if authenticating via LDAP which could explain it.

[SC92]

Nope, 10.6 is Snow leopard. Really bugging me - want to know the culprit!!!!

[Arthur]

Login (and logout) times will be listed in the /var/log/secure.log files. Use the Console app to view these. More info here.

[AntonioRocco]

Hi

 

There are a number of command line tools (binaries) you canuse. Log in as the local administrator on that workstation, launch Terminal and issue the "last" command. It will show login, logout times and duration of login session etc. Issuing "ac -p" will show the history of who logged in and how long they were logged for as a total. You could also check out the "uptime" command. Consult the manual page for usage "man uptime". Issue all the commands without the quotes.

 

HTH?

 

Antonio Rocco (ACSA)

[Flakes]

lol sorry, didnt see this was in the MAC forum, i just clicked through from todays posts, will double check next time.