How to confirm a user logged in is a remote user?

[kirtikjr]

How do I confirm if a user logged in, is remote or local? In the case the user is remote, how to be sure what authentication/method is it using, like LDAP, NIS or other?

[Irithori]

This will tell you local or remote

last

For the auth method:
I believe there is no other way then to review the configuration of that box.

[kirtikjr]

actually theres a user "abc123". Its not listed in /etc/passwd. so i wanted to know it gets authenticated to login to this machine.

Thanks'

[atreyu]

Maybe look for instances of that username in your system logs:

grep -r abc123 /var/log

[seacliff]

this will list all instance of abc123 your system is configured for

getent passwd abc123

this will list where your system look for, to authenticate users

grep passwd /etc/nsswitch.conf