[Touch-packages] [Bug 1707645] Re: system with high numbered uids has huge sparse /var/log/lastlog
Oliver, from the lastlog(8) manpage: The lastlog file is a database which contains info on the last login of each user. You should not rotate it. It is a sparse file, so its size on the disk is usually much smaller than the one shown by "ls -l" (which can indicate a really big file if you have in passwd users with a high UID). You can display its real size with "ls -s". http://manpages.ubuntu.com/manpages/focal/man8/lastlog.8.html If you're using a filesystem that can't handle sparse files it might be best to not use lastlog. Thanks -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to pam in Ubuntu. https://bugs.launchpad.net/bugs/1707645 Title: system with high numbered uids has huge sparse /var/log/lastlog Status in pam package in Ubuntu: Confirmed Status in shadow package in Ubuntu: Confirmed Status in util-linux package in Ubuntu: Confirmed Bug description: I was investigating the use of a single high UID user (ie, 20) and discovered that /var/log/lastlog grew to an enormously large sparse file: $ ls -lh /var/log/lastlog -rw-rw-r-- 1 root utmp 544G Jul 27 12:35 /var/log/lastlog The file is actually quite small though: $ ls -lh --size /var/log/lastlog 56K -rw-rw-r-- 1 root utmp 544G Jul 27 12:35 /var/log/lastlog On a standalone system, this is possibly not a problem since it is highly unlikely that a system will have 2 billion users, but this is confirmed to wreak havoc on rsync backups. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/pam/+bug/1707645/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1707645] Re: system with high numbered uids has huge sparse /var/log/lastlog
This is affecting Ubuntu 20.04 with sssd integration to AD. I am seeing massive lastlog files because of what appears to be the use of very high UID's being assigned to AD users when they log in. -rw-rw-r-- 1 root utmp88943346292 Jan 6 16:50 lastlog Oliver -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to pam in Ubuntu. https://bugs.launchpad.net/bugs/1707645 Title: system with high numbered uids has huge sparse /var/log/lastlog Status in pam package in Ubuntu: Confirmed Status in shadow package in Ubuntu: Confirmed Status in util-linux package in Ubuntu: Confirmed Bug description: I was investigating the use of a single high UID user (ie, 20) and discovered that /var/log/lastlog grew to an enormously large sparse file: $ ls -lh /var/log/lastlog -rw-rw-r-- 1 root utmp 544G Jul 27 12:35 /var/log/lastlog The file is actually quite small though: $ ls -lh --size /var/log/lastlog 56K -rw-rw-r-- 1 root utmp 544G Jul 27 12:35 /var/log/lastlog On a standalone system, this is possibly not a problem since it is highly unlikely that a system will have 2 billion users, but this is confirmed to wreak havoc on rsync backups. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/pam/+bug/1707645/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1707645] Re: system with high numbered uids has huge sparse /var/log/lastlog
Someone needs to take on all the affected systems, PAM, users etc to find a fix. In redhat this has been an open issue since 2013. If anybody sees this hopefully it will direct interested parties to places where other people are talking about the same issue. This also becomes an issue in Docker containers, where user IDs are large. Great way to fill up your docker image with junk. https://bugzilla.redhat.com/show_bug.cgi?id=951564 ** Bug watch added: Red Hat Bugzilla #951564 https://bugzilla.redhat.com/show_bug.cgi?id=951564 -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to util-linux in Ubuntu. https://bugs.launchpad.net/bugs/1707645 Title: system with high numbered uids has huge sparse /var/log/lastlog Status in pam package in Ubuntu: Confirmed Status in shadow package in Ubuntu: Confirmed Status in util-linux package in Ubuntu: Confirmed Bug description: I was investigating the use of a single high UID user (ie, 20) and discovered that /var/log/lastlog grew to an enormously large sparse file: $ ls -lh /var/log/lastlog -rw-rw-r-- 1 root utmp 544G Jul 27 12:35 /var/log/lastlog The file is actually quite small though: $ ls -lh --size /var/log/lastlog 56K -rw-rw-r-- 1 root utmp 544G Jul 27 12:35 /var/log/lastlog On a standalone system, this is possibly not a problem since it is highly unlikely that a system will have 2 billion users, but this is confirmed to wreak havoc on rsync backups. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/pam/+bug/1707645/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1707645] Re: system with high numbered uids has huge sparse /var/log/lastlog
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: util-linux (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to util-linux in Ubuntu. https://bugs.launchpad.net/bugs/1707645 Title: system with high numbered uids has huge sparse /var/log/lastlog Status in pam package in Ubuntu: Confirmed Status in shadow package in Ubuntu: Confirmed Status in util-linux package in Ubuntu: Confirmed Bug description: I was investigating the use of a single high UID user (ie, 20) and discovered that /var/log/lastlog grew to an enormously large sparse file: $ ls -lh /var/log/lastlog -rw-rw-r-- 1 root utmp 544G Jul 27 12:35 /var/log/lastlog The file is actually quite small though: $ ls -lh --size /var/log/lastlog 56K -rw-rw-r-- 1 root utmp 544G Jul 27 12:35 /var/log/lastlog On a standalone system, this is possibly not a problem since it is highly unlikely that a system will have 2 billion users, but this is confirmed to wreak havoc on rsync backups. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/pam/+bug/1707645/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1707645] Re: system with high numbered uids has huge sparse /var/log/lastlog
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: pam (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to util-linux in Ubuntu. https://bugs.launchpad.net/bugs/1707645 Title: system with high numbered uids has huge sparse /var/log/lastlog Status in pam package in Ubuntu: Confirmed Status in shadow package in Ubuntu: Confirmed Status in util-linux package in Ubuntu: Confirmed Bug description: I was investigating the use of a single high UID user (ie, 20) and discovered that /var/log/lastlog grew to an enormously large sparse file: $ ls -lh /var/log/lastlog -rw-rw-r-- 1 root utmp 544G Jul 27 12:35 /var/log/lastlog The file is actually quite small though: $ ls -lh --size /var/log/lastlog 56K -rw-rw-r-- 1 root utmp 544G Jul 27 12:35 /var/log/lastlog On a standalone system, this is possibly not a problem since it is highly unlikely that a system will have 2 billion users, but this is confirmed to wreak havoc on rsync backups. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/pam/+bug/1707645/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1707645] Re: system with high numbered uids has huge sparse /var/log/lastlog
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: shadow (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to util-linux in Ubuntu. https://bugs.launchpad.net/bugs/1707645 Title: system with high numbered uids has huge sparse /var/log/lastlog Status in pam package in Ubuntu: Confirmed Status in shadow package in Ubuntu: Confirmed Status in util-linux package in Ubuntu: Confirmed Bug description: I was investigating the use of a single high UID user (ie, 20) and discovered that /var/log/lastlog grew to an enormously large sparse file: $ ls -lh /var/log/lastlog -rw-rw-r-- 1 root utmp 544G Jul 27 12:35 /var/log/lastlog The file is actually quite small though: $ ls -lh --size /var/log/lastlog 56K -rw-rw-r-- 1 root utmp 544G Jul 27 12:35 /var/log/lastlog On a standalone system, this is possibly not a problem since it is highly unlikely that a system will have 2 billion users, but this is confirmed to wreak havoc on rsync backups. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/pam/+bug/1707645/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1707645] Re: system with high numbered uids has huge sparse /var/log/lastlog
I don't see what we can be expected to do with this bug report. This is the defined file format for /var/log/lastlog. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to util-linux in Ubuntu. https://bugs.launchpad.net/bugs/1707645 Title: system with high numbered uids has huge sparse /var/log/lastlog Status in pam package in Ubuntu: New Status in shadow package in Ubuntu: New Status in util-linux package in Ubuntu: New Bug description: I was investigating the use of a single high UID user (ie, 20) and discovered that /var/log/lastlog grew to an enormously large sparse file: $ ls -lh /var/log/lastlog -rw-rw-r-- 1 root utmp 544G Jul 27 12:35 /var/log/lastlog The file is actually quite small though: $ ls -lh --size /var/log/lastlog 56K -rw-rw-r-- 1 root utmp 544G Jul 27 12:35 /var/log/lastlog On a standalone system, this is possibly not a problem since it is highly unlikely that a system will have 2 billion users, but this is confirmed to wreak havoc on rsync backups. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/pam/+bug/1707645/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1707645] Re: system with high numbered uids has huge sparse /var/log/lastlog
** Also affects: shadow (Ubuntu) Importance: Undecided Status: New ** Also affects: pam (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to util-linux in Ubuntu. https://bugs.launchpad.net/bugs/1707645 Title: system with high numbered uids has huge sparse /var/log/lastlog Status in pam package in Ubuntu: New Status in shadow package in Ubuntu: New Status in util-linux package in Ubuntu: New Bug description: I was investigating the use of a single high UID user (ie, 20) and discovered that /var/log/lastlog grew to an enormously large sparse file: $ ls -lh /var/log/lastlog -rw-rw-r-- 1 root utmp 544G Jul 27 12:35 /var/log/lastlog The file is actually quite small though: $ ls -lh --size /var/log/lastlog 56K -rw-rw-r-- 1 root utmp 544G Jul 27 12:35 /var/log/lastlog On a standalone system, this is possibly not a problem since it is highly unlikely that a system will have 2 billion users, but this is confirmed to wreak havoc on rsync backups. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/pam/+bug/1707645/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1707645] Re: system with high numbered uids has huge sparse /var/log/lastlog
** Tags added: artful -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to util-linux in Ubuntu. https://bugs.launchpad.net/bugs/1707645 Title: system with high numbered uids has huge sparse /var/log/lastlog Status in util-linux package in Ubuntu: New Bug description: I was investigating the use of a single high UID user (ie, 20) and discovered that /var/log/lastlog grew to an enormously large sparse file: $ ls -lh /var/log/lastlog -rw-rw-r-- 1 root utmp 544G Jul 27 12:35 /var/log/lastlog The file is actually quite small though: $ ls -lh --size /var/log/lastlog 56K -rw-rw-r-- 1 root utmp 544G Jul 27 12:35 /var/log/lastlog On a standalone system, this is possibly not a problem since it is highly unlikely that a system will have 2 billion users, but this is confirmed to wreak havoc on rsync backups. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/util-linux/+bug/1707645/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1707645] Re: system with high numbered uids has huge sparse /var/log/lastlog
** Changed in: util-linux (Ubuntu) Importance: Undecided => Low -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to util-linux in Ubuntu. https://bugs.launchpad.net/bugs/1707645 Title: system with high numbered uids has huge sparse /var/log/lastlog Status in util-linux package in Ubuntu: New Bug description: I was investigating the use of a single high UID user (ie, 20) and discovered that /var/log/lastlog grew to an enormously large sparse file: $ ls -lh /var/log/lastlog -rw-rw-r-- 1 root utmp 544G Jul 27 12:35 /var/log/lastlog The file is actually quite small though: $ ls -lh --size /var/log/lastlog 56K -rw-rw-r-- 1 root utmp 544G Jul 27 12:35 /var/log/lastlog On a standalone system, this is possibly not a problem since it is highly unlikely that a system will have 2 billion users, but this is confirmed to wreak havoc on rsync backups. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/util-linux/+bug/1707645/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1707645] Re: system with high numbered uids has huge sparse /var/log/lastlog
FYI, people using rsync for backups might be interested in the --sparse (-S) option. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to util-linux in Ubuntu. https://bugs.launchpad.net/bugs/1707645 Title: system with high numbered uids has huge sparse /var/log/lastlog Status in util-linux package in Ubuntu: New Bug description: I was investigating the use of a single high UID user (ie, 20) and discovered that /var/log/lastlog grew to an enormously large sparse file: $ ls -lh /var/log/lastlog -rw-rw-r-- 1 root utmp 544G Jul 27 12:35 /var/log/lastlog The file is actually quite small though: $ ls -lh --size /var/log/lastlog 56K -rw-rw-r-- 1 root utmp 544G Jul 27 12:35 /var/log/lastlog On a standalone system, this is possibly not a problem since it is highly unlikely that a system will have 2 billion users, but this is confirmed to wreak havoc on rsync backups. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/util-linux/+bug/1707645/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
