topic Re: su another user in Operating System - Linux

su another user

juno2 — Thu, 07 Aug 2003 00:28:03 GMT

I want to let a user A to use "su" to login to another user - user B where user A is null password, i tried to modify the file /etc/group and add user A to the wheel statement , but it still can't run su to login as user B , what is wrong in my system ? thx

Re: su another user

Wouter Jagers — Thu, 07 Aug 2003 00:44:34 GMT

If both accounts are set up properly, in other words you can use them separately without problems, it shouldn't be too hard.

Can you switch from userA to root ? (using su -)

The command you use as userA is "su - userB" (without the quotes), right ?

regards
Wouter

Re: su another user

Stuart Browne — Thu, 07 Aug 2003 00:47:57 GMT

Erm, so 'userA' is issuing 'su - userB', and what's the net result? UserA should be prompted for userB's password.

You shouldn't have to worry about 'groups' at all.

The only limitation could possibly be trying to 'su' to 'root' (as you can limit this to a given group or specific users).

Do you get any error's showing up in the log files?

Re: su another user

Steven E. Protter — Thu, 07 Aug 2003 01:46:15 GMT

Please post the command you are using and the resultant output.

Also publish the log output.

/var/log/lastlog should contain useful information.

SEP

Re: su another user

juno2 — Thu, 07 Aug 2003 03:16:14 GMT

Thx all reply,

Another question, the below is one of the statement on the /etc/shadow file ,

# vi /etc/shadow
User_B:!!:12251:0:99999:7:::

what is the meaning of the password field "!!" ? is it null password ? thx

Re: su another user

Stuart Browne — Thu, 07 Aug 2003 03:31:46 GMT

No. It's a "No password can match". user cannot log-in.

Re: su another user

Nat Guyton — Thu, 14 Aug 2003 19:00:38 GMT

You should be able to set an empty password for user B, and anyone can su to that account with no password challenge.

You don't really want to do that, from a security perspective, though.

To allow just user A to su to user B with no password, look at using "sudo" - http://www.sudo.ws/sudo/

If you want user A to run commands as user B and don't want to use sudo, you can use a .rhosts file with rsh (yuck!) or look at ssh with no passphrase in rsa public/private key files...