Subject:   -92- Why do 'who', 'rusers', etc. show users who aren't
                really logged in?
Date: 30 Jan 1995 00:00:01 EST

  Several bugs in different versions of IRIX cause /etc/utmp to not be
  updated properly after a user logs out. Programs incorrectly reporting
  logins are correctly reporting the incorrect contents of /etc/utmp.
  One such bug is present in an unspecified part of IRIX 4.0.x and fixed
  in IRIX 5.x, and another is in ftpd in IRIX 5.2 and fixed in patch 162
  and IRIX 5.3.

  If one can't fix the bug which causes the incorrect /etc/utmp
  entries, one can run a separate program to remove them from /etc/utmp
  after the fact. Jeremy DuBois <jer@asdc.com>, David Hinds
  <dhinds@allegro.stanford.edu> and Patrick M. Ryan <pat@gsfc.nasa.gov>
  have written such programs, which can be found in
  ftp://viz.tamu.edu/pub/sgi/software/utmp/. SGI provides such a
  program, /usr/sbin/chkutent, in IRIX 5.3; the root crontab runs it
  daily.