Removing ghost users

This occurs when who shows a user as logged on but grep is showing nothing

  1. cd /usr/lib/acct

  2. ./fwtmp < /etc/utmp > /tmp/utmp

  3. edit /tmp/utmp changing 5th column to 8 for ghost user

  4. ./fwtmp -ic < /tmp/utmp > /etc/utmp