#include <utmp.h>
struct utmp *getutent ( ) struct utmp *getutid (ID) struct utmp *ID; struct utmp *getutline (Line) struct utmp *Line; void pututline (Utmp) struct utmp *Utmp; void setutent ( ) void endutent ( ) void utmpname (File) char *File;
The getutent, getutid, and getutline subroutines return a pointer to a structure of the following type:
#define ut_name ut_user
#define ut_id ut_line
struct utmp
{
char ut_user[8]; /* User name */
char ut_id[14]; /* /etc/inittab ID */
char ut_line[12]; /* Device name (console, lnxx) */
short ut_pid; /* Process ID */
short ut_type; /* Type of entry */
struct exit_status
{
short e_termination; /* Process termination status */
short e_exit; /* Process exit status */
} ut_exit; /* Exit status of a DEAD_PROCESS */
time_t ut_time; /* Time entry was made */
char ut_host[16]; /* Host name */
};
The getutent subroutine reads the next entry from a utmp-like file. If the file is not open, this subroutine opens it. If the end of the file is reached, the getutent subroutine fails.
The pututline subroutine writes the supplied Utmp parameter structure into the utmp file. It is assumed that the user of the pututline subroutine has searched for the proper entry point using one of the getut subroutines. If not, the pututline subroutine calls getutid to search forward for the proper place. If so, pututline does not search. If the pututline subroutine does not find a matching slot for the entry, it adds a new entry to the end of the file.
The setutent subroutine resets the input stream to the beginning of the file. Issue a setuid call before each search for a new entry if you want to examine the entire file.
The endutent subroutine closes the file currently open.
The utmpname subroutine changes the name of a file to be examined from /etc/utmp to any other file. The name specified is usually /var/adm/wtmp. If the specified file does not exist, no indication is given. You are not aware of this fact until your first attempt to reference the file. The utmpname subroutine does not open the file. It closes the old file, if currently open, and saves the new file name.
The most current entry is saved in a static structure. To make multiple accesses, you must copy or use the structure between each access. The getutid and getutline subroutines examine the static structure first. If the contents of the static structure match what they are searching for, they do not read the utmp file. Therefore, you must fill the static structure with zeros after each use if you want to use these subroutines to search for multiple occurrences.
If the pututline subroutine finds that it is not already at the correct place in the file, the implicit read it performs does not overwrite the contents of the static structure returned by the getutent subroutine, the getuid subroutine, or the getutline subroutine. This allows you to get an entry with one of these subroutines, modify the structure, and pass the pointer back to the pututline subroutine for writing.
These subroutines use buffered standard I/O for input. However, the pututline subroutine uses an unbuffered nonstandard write to avoid race conditions between processes trying to modify the utmp and wtmp files.
These subroutines fail and return a null pointer if a read or write fails due to a permission conflict or because the end of the file is reached.
| /etc/utmp | Path to the utmp file, which contains a record of users logged into the system. |
| /var/adm/wtmp | Path to the wtmp file, which contains accounting information about users logged in. |
These subroutines are part of Base Operating System (BOS) Runtime.
The ttyslot subroutine.
The failedlogin, utmp, or wtmp file.