Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've inherited a system that has both telnet and ftp enabled. As both these send passwords in cleartext I want to disable them. But many users have never changed their ways to use sftp or ssh. And before I make the change I need to contact them.

What is a good way to see either the number of users or ideally the usernames people are using to login on these services? The best idea I've come up with so far is to grep /var/log/secure. But I'm not sure of what/how to grep this and the high activity has made finding examples difficult. The system is running RHEL 5 if that helps.


share|improve this question
Use /etc/motd. – Ignacio Vazquez-Abrams Oct 3 '11 at 22:55

cat /var/log/auth.log. And then you need some grep fu to extract what you want.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.