Starting with 11.23 HP is using utmps as if we didn't already have enough (utmp, wtmp, utmpx, wtmpx,... did I miss any??) . Anyway, I added support for it in (before this patch no logins from ssh were showing up on my 11.23 and 11.31 systems). http://homepage.mac.com/gagnocg/downloads/hpux-cvs.diff