topic Re: can not su in Operating System - HP-UX

can not su

Alan Casey — Tue, 22 Nov 2005 04:04:11 GMT

Hi, I made some permission changes yesterday as part of an audit on out hp-ux 11.0 server.

As a result we now can not su to any user:
getting the following error su'ing to any id

"image1(ts9ac1)/home/ts9ac1> su -
Password:
su: Unknown id: root"

Any ideas where the permissions problem may be?
Thanks

Re: can not su

RAC_1 — Tue, 22 Nov 2005 04:11:38 GMT

What are the perms on /etc/passwd file?? Should be read to all.

Re: can not su

Alan Casey — Tue, 22 Nov 2005 04:13:22 GMT

darwin-/ora_export/logs> ll /etc/passwd
-r--r--r-- 1 root swadm 939 Nov 21 11:52 /etc/passwd

Re: can not su

RAC_1 — Tue, 22 Nov 2005 04:21:12 GMT

type su
pwck
grpck

Also perms on /etc/profile, /etc/group

Re: can not su

Robert-Jan Goossens — Tue, 22 Nov 2005 04:22:16 GMT

and the permissions of the /etc directory ?

# ls -lad /etc
dr-xr-xr-x 27 bin bin 6144 Nov 22 06:40 .

Re: can not su

Indrajit_1 — Tue, 22 Nov 2005 04:23:31 GMT

Hi Alan,

have u made any changes in /etc/passwd file ? for example root id.
check the output of id -a root.. root id sould always 0..

Regards
indrajit

Re: can not su

Alan Casey — Tue, 22 Nov 2005 04:28:55 GMT

Thanks guys,

turns out the stick bit was missing on
/usr/bin/su

just realized by comparing to another system.
cheers for the help
alan

Re: can not su

Svetoslav Gyurov — Tue, 22 Nov 2005 04:31:23 GMT

Hi,

As a part of these changes have you converted the system to Trusted System ?! I experienced the same behaviour when I converted one system to trusted system. If You made these changes through SAM, it will tell you that the system needs to be converted and ask you to reply with Yes or No.

Regards,
sve