topic Re: not able to su - in Operating System - HP-UX

not able to su -

gany59 — Thu, 11 Mar 2010 19:41:08 GMT

Hi,

While i am able login as a root by su -
i am facing the error as :
su: Your own ID is unknown.

so i am checked the /tcb/files/auth/r/root ... but i am not able to find out any of clues.

Below is my o/p of the /tcb/files/auth/r/root file

alicgd> more /tcb/files/auth/r/root
root:u_name=root:u_id#0:\
:u_pwd=QjhOwFxpHe0mM:\
:u_bootauth:u_auditid#0:\
:u_auditflag#1:\
:u_pswduser=root:u_suclog#1265658893:u_lock@:chkent:

Please tell me how to proceed this issue..

Thanks in advance !!!!!!!!!!!!

Re: not able to su -

Steven E. Protter — Thu, 11 Mar 2010 19:43:22 GMT

Shalom,

It is not talking about the root user, its talking about the id you are using to su - from.

Check that ID.

Also check pam configuration. Many systems block this feature for security and auditing reasons.

SEP

Re: not able to su -

gany59 — Thu, 11 Mar 2010 19:52:31 GMT

yes.. the below is my userid file :

kuppsra:u_name=kuppsra:u_id#3830:\
:u_pwd=g4Acdwyb5a.p2:\
:u_auditid#3061:\
:u_auditflag#1:\
:u_succhg#1265738983:u_suclog#1267549488:u_suctty=ttyrb:u_unsuclog#1267549477:\
:u_unsuctty=ttyrb:u_lock@:chkent:

So can i know where is the pam file.. ?

Re: not able to su -

gany59 — Thu, 11 Mar 2010 19:58:02 GMT

Hello Steve,

Here is my /etc/pam.conf file..

dcbc9z> more /etc/pam.conf
#ident "@(#)pam.conf 1.15 95/09/11 SMI"
#
# PAM configuration
#
# Authentication management
#
dtlogin auth required /usr/lib/security/libpam_unix.1
dtaction auth required /usr/lib/security/libpam_unix.1
OTHER auth required /usr/lib/security/libpam_unix.1
#
# Account management
#
dtlogin account required /usr/lib/security/libpam_unix.1
dtaction account required /usr/lib/security/libpam_unix.1
#
OTHER account required /usr/lib/security/libpam_unix.1
#
# Session management
#
dtlogin session required /usr/lib/security/libpam_unix.1
dtaction session required /usr/lib/security/libpam_unix.1
OTHER session required /usr/lib/security/libpam_unix.1
#
# Password management
#
dtlogin password required /usr/lib/security/libpam_unix.1
dtaction password required /usr/lib/security/libpam_unix.1
OTHER password required /usr/lib/security/libpam_unix.1

So i can't find any of the clues from this file.. can u help me out on this.....

Re: not able to su -

Patrick Wallek — Thu, 11 Mar 2010 19:59:47 GMT

Please post (copy and paste) exactly what you do and the exact errors you are getting.

Re: not able to su -

gany59 — Thu, 11 Mar 2010 20:03:49 GMT

Hello Partik..

This is the error i am getting , while i am try to do su -

(dcbc9z:kuppsra) su -
su: Your own ID is unknown.
(alicgd:kuppsra)

Re: not able to su -

Patrick Wallek — Thu, 11 Mar 2010 20:12:30 GMT

Have a look at this thread:

http://forums13.itrc.hp.com/service/forums/questionanswer.do?admit=109447627+1268338202720+28353475&threadId=86361

In a nutshell:

There may be corruption in the /tcb structures. Run 'authck -a' to see if any problems are reported. If so, fix them and then try your su again.

Re: not able to su -

Steven E. Protter — Thu, 11 Mar 2010 20:29:25 GMT

Shalom,

The pam configuration looks good. Nobody has deliberately tried to stop su - login, though its trivial to do so.

I'm leaning toward /tcb corruption now. If it is not too large, please post the results of the authck -a command or post highlights.

SEP

Re: not able to su -

gany59 — Wed, 14 Apr 2010 14:05:45 GMT

Hi,

I have a concern like can i copy the /tcb/auth/files/ by the ignite backup. If we take the ignite backup all the configuration files need to be there in the ignite tape right ?.. so is there a way to copy that file from teh ignite tape, is yes.. please let me know how to do that.