This occurs when who shows a user as logged on but grep is showing nothing

 1. cd /usr/lib/acct
 2. ./fwtmp < /etc/utmp > /tmp/utmp
 3. edit /tmp/utmp changing 5th column to 8 for ghost user
 4. ./fwtmp -ic < /tmp/utmp > /etc/utmp

Recent Changes