topic Re: su - root in Operating System - HP-UX

su - root

Fuad_1 — Wed, 11 Sep 2002 09:52:51 GMT

I have two users in different groups, and both have the root password. One can issue su - root and enter the system and the second one is not. Can any one explain this?

Re: su - root

Pete Randall — Wed, 11 Sep 2002 09:54:27 GMT

Do you have SU_ROOT_GROUP= set in /etc/default/security?

Pete

Re: su - root

Fuad_1 — Wed, 11 Sep 2002 10:00:38 GMT

Hi,

No, i don't have it.

Re: su - root

Darren Prior — Wed, 11 Sep 2002 10:07:46 GMT

Hi,

What error messages are you seeing for the failed attempt? Is anything showing up in syslog?

Are both users using the same su command, check by giving the full path /usr/bin/su?

Is your system trusted, or using NIS? Is it only the root account that is affected?

regards,

Darren.

Re: su - root

harry d brown jr — Wed, 11 Sep 2002 10:09:55 GMT

What OS release?

What was the last patch bundle installed?

What groups does user1 belong to that user2 does not?

What is the error message that user2 receives when they can't su to root?

live free or die
harry

Re: su - root

Fuad_1 — Wed, 11 Sep 2002 10:21:32 GMT

The one that can login is in "users" group, and the one can not is in "ora" group. The message error is "su:sorry".

Re: su - root

Pete Randall — Wed, 11 Sep 2002 10:24:43 GMT

That sounds like they're entering the wrong password. Have you tried this yourself?

Pete

Re: su - root

Ravi_8 — Wed, 11 Sep 2002 10:26:22 GMT

Hi,
could u change the users secondary group to the primary of another

Re: su - root

Fuad_1 — Wed, 11 Sep 2002 10:27:51 GMT

I have tried both with the correct password.

Re: su - root

Sanjay_6 — Wed, 11 Sep 2002 10:29:58 GMT

Hi Faud,

Have you checked the path to su command for both the users.

For each user, try

$type su

or

$which su

Hope this helps.

regds

Re: su - root

john korterman — Wed, 11 Sep 2002 11:47:57 GMT

Hi Fuad,

long shot... but does the second user have an alias set up for the "su" command? I have tried to simulate the behaviour of your second user by setting up this alias:

# alias 'su'='su - jxk'

on a system where the user jxk exists. It could be that the second user had something similar to that.

Regards,
John K.