As the log files tells you, the user is trying userid Admin. Check if
this ID exists on ur unix box.

To get a list of IP's and stuff from where people login using telnet or
any other protocol, ask ur sysadmin on unix to log all activity. ( sysad
can restrict users via inetd.sec file )

Some of the commands which might help you -

last -R , lastb -R , netstat ( you can run these yourself ) -
check in informix log, the approx time when this person tries this and
before that time, start a script with netstat or later check with
lastb/last ( last commands will help u only in case of telnet - in other
cases - if u have tcp/ip connection set for informix, netstat might help ).

Hope this helps.

Rgds
Preetinder

jorge valenzuela wrote:

>Hi all !!
>
>I frecuently seen this message on the log file:
>
>"Admin: Incorrect password or user Admin is not known on the database
>server"
>
>I believe two posible options there is someone that is very stupit that
>always
>forget his user and password or someone is trying to log in on the database
>server.
>
>In both cases, I need to identify this person, my question is how can I
>identify this user ?
>
>Thanks in advance.
>
>hpux=11.0
>ids=7.3
>
>
>
>
>sending to informix-list
>
>
>

sending to informix-list

Actually, I saw this once before. It's some MS aberration where it tries to
log you in as user Admin if there is something wrong with your ODBC, or
Access or something. I can't remember the details, but then I can't
remember my address either.

preetinder dhaliwal wrote:

> As the log files tells you, the user is trying userid Admin. Check if
> this ID exists on ur unix box.
>
> To get a list of IP's and stuff from where people login using telnet or
> any other protocol, ask ur sysadmin on unix to log all activity. ( sysad
> can restrict users via inetd.sec file )
>
> Some of the commands which might help you -
>
> last -R , lastb -R , netstat ( you can run these yourself ) -
> check in informix log, the approx time when this person tries this and
> before that time, start a script with netstat or later check with
> lastb/last ( last commands will help u only in case of telnet - in other
> cases - if u have tcp/ip connection set for informix, netstat might help
> ).
>
> Hope this helps.
>
> Rgds
> Preetinder
>
> jorge valenzuela wrote:
>
>>Hi all !!
>>
>>I frecuently seen this message on the log file:
>>
>>"Admin: Incorrect password or user Admin is not known on the database
>>server"


--
--
Ciao,
The Obnoxious One

"Ogni homo me guarda come fosse una testa de cazi"