Tracking down login process

[soycharliente]

I'm not 100% on the vocabulary to articulate what I need, so please bear with me.

 

I inherited a server at work. I login through SSH and as soon as I get done typing in the password, it displays the last login date/time and a large ASCII drawing. I have tried looking in a number of places, but I cannot for the life of me figure out where this drawing is being pulled from. Reading around online leads me to looking at directories/files such as /etc/profile, /etc/profile.d, and ~/.bash_profile. I don't see anything related to this drawing.

 

Anyone up for helping me through finding where this comes from?

[Christian F.]

That's the fortune cookie.

If you run man fortune in the shell, you'll get the necessary information on how to use it. fortune -f lists the files used by fortune to show the cookies from.

[kicken]

Check /etc/motd.  That file is displayed after login.  If the drawing is not in there it is likely being generated by a program that is run during the profile setup.

[soycharliente]

If you run man fortune in the shell, you'll get the necessary information on how to use it.

 

[root@localhost ~]# man fortune
No manual entry for fortune

 

Check /etc/motd.

 

That's it! Thanks for the help!