topic Re: I can´t su to root from a common user in Operating System - HP-UX

I can´t su to root from a common user

Sandreliz — Fri, 30 Sep 2005 13:15:18 GMT

Hello everybody...

I have the following problem, when I try su to root from a common user I can´t, and the answer is su:Sorry, but I´m able to su to a common user from root, but if I su to a common user from root and after that su to root from this common user it´s allowed.
I´ve already looked /usr/bin/su and /usr/bin/login, as I saw in others foruns but it´s OK.

I´ll be waiting for any help.
Thanks!

Re: I can´t su to root from a common user

Rick Garland — Fri, 30 Sep 2005 13:19:19 GMT

Does this happen with a specific user? Can you su - (to the root) from another user?

Keyboard is OK? Not doing caps lock on?

What does the sulog say? The specific entry when it fails. Anything in syslog.log?

Re: I can´t su to root from a common user

James R. Ferguson — Fri, 30 Sep 2005 13:23:05 GMT

Hi:

See if you have 'SU_ROOT_GROUP' defined in '/etc/default/security'.

Regards!

...JRF...

Re: I can´t su to root from a common user

Sandreliz — Fri, 30 Sep 2005 13:41:12 GMT

It happens with every common user.
My keybord is ok, and theÂ´s nothing in syslog.log

sulog shows:
SU 09/30 13:32 - tCb sandre-root

Re: I can´t su to root from a common user

Sandreliz — Fri, 30 Sep 2005 13:43:59 GMT

I donÂ´t have this file /etc/default/security
But I donÂ´t have it in all my servers and only one is presenting this problem.

Re: I can´t su to root from a common user

Raj D. — Fri, 30 Sep 2005 13:57:54 GMT

Hi Sandreliz,

Check the permission of su

-r-sr-xr-x 1 root bin 24576 Aug 6 1998 /usr/bin/su

cheers,
Raj.

Re: I can´t su to root from a common user

Sandreliz — Fri, 30 Sep 2005 14:00:28 GMT

Hi Raj,

The permission is ok, just like yours.

Re: I can´t su to root from a common user

baiju_3 — Fri, 30 Sep 2005 14:00:53 GMT

If you do not have /etc/default/security file , then create one , the permissions are

-rw-r--r-- 1 root sys 47 Feb 13 2003 security
and enter SU_ROOT_GROUP="your group" and try again .

thx,
bl.

Re: I can´t su to root from a common user

Sandman! — Fri, 30 Sep 2005 14:03:44 GMT

Can you login to root directly on your system?

Re: I can´t su to root from a common user

Sandreliz — Fri, 30 Sep 2005 14:16:53 GMT

No, I canÂ´t login to root directly, because itÂ´s a rule of my company, but before it has been set I had this problem.

Re: I can´t su to root from a common user

Thomas J. Harrold_1 — Fri, 30 Sep 2005 14:31:51 GMT

Many flavors of Unix require that the non-root account be a member of a certain group (wheel, system, etc..)

Not sure if HP-UX has this requirement.
Just for fun, try adding your non-root account to the same groups as root, and see if that fixes the problem. If so, you're on the right track.

-tjh

Re: I can´t su to root from a common user

John Kittel — Fri, 30 Sep 2005 16:08:57 GMT

a very old knowledge base document, id 200000080078793, discusses similar problem caused for posix shell users when root password contains special characters such as @, #, $, %,etc .

If your root password has one of these characters you might want to try changing the password to one without, then see if su works from these problem users.

- John

Re: I can´t su to root from a common user

VIKAS AGRAWAL — Sat, 01 Oct 2005 00:51:00 GMT

go to directory

/usr/bin

use what su
what version it is showing

# what su
su:
$Revision: B.11.22_LR
Tue Jul 23 18:59:22 PDT 2002 $

it should show some thing like this , or upgrade your su.

vikas

Re: I can´t su to root from a common user

Muthukumar_5 — Sat, 01 Oct 2005 01:45:53 GMT

What is there in /etc/profile and .profile for su related things? Sometime they may be blocked to use su to root.

What is there in /etc/securetty file?
Is sudo running to control root based logins?

Check it and revert back.

hth.

Re: I can´t su to root from a common user

Sandreliz — Mon, 03 Oct 2005 06:46:25 GMT

Hi John,

My root password really had special characters, then I changed it and the problem is over.

Thanks very much.

And thanks everyone that tried to help me.

Sandreliz

Re: I can´t su to root from a common user

Muthukumar_5 — Mon, 03 Oct 2005 06:48:09 GMT

Sandreliz,

Special character like # will not work with present hp-ux systems. I hope 11.32 will do.

hth.

Re: I can´t su to root from a common user

Muthukumar_5 — Mon, 03 Oct 2005 06:49:58 GMT

More reference is:

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=805657

If you are problem is resolved, try to assign points.

hth.

Re: I can´t su to root from a common user

Sandreliz — Mon, 03 Oct 2005 06:50:21 GMT

The problem was the special character in my root password.

Re: I can´t su to root from a common user

Muthukumar_5 — Mon, 03 Oct 2005 06:59:39 GMT

Sandreliz,

Please assing points to the repliers to help you in future. ;)

thx.

Re: I can´t su to root from a common user

Sandreliz — Mon, 03 Oct 2005 07:03:02 GMT

Ok Muthukumar,
I've already assigned points.

Thanks again.
Sandreliz