topic Problem with pam_wheel in Operating System - Linux

Problem with pam_wheel

Nick Lunt — Tue, 20 Jun 2006 04:16:45 GMT

Hi folks,

Ive commented out the following line in /etc/pam.d/su

auth required /lib/security/$ISA/pam_wheel.so use_uid

As I understand it now only users in the wheel group should be able to su to root.
That works, however users not in the wheel group cannot su to any other user.

Im not particularly clued up on PAM so if someone could tell me where Im going wrong Id appreciate it.

System info:
RHEL 2.6.9-22.0.1.EL
pam-0.77-66.13

Many thanks,
Nick .

Re: Problem with pam_wheel

Ivan Ferreira — Tue, 20 Jun 2006 10:36:24 GMT

Hello Nick, try using:

auth required /lib/security/$ISA/pam_wheel.so use_uid root_only

root_only: The check for wheel membership is done only if the uid of requested account is 0.

Re: Problem with pam_wheel

Nick Lunt — Wed, 21 Jun 2006 03:07:20 GMT

Thanks Ivan,

unfortunately that does not look like its a valid option :

$ tail /var/log/messages
Jun 21 09:01:07 fudge PAM-Wheel[6884]: pam_parse: unknown option; root_only

I also tried changing root_only to only_root with the same error.

Nick .

Re: Problem with pam_wheel

Ivan Ferreira — Wed, 21 Jun 2006 09:31:19 GMT

I just tested on my system and it works as should be, and no invalid option displayed. So, it should be something with your pam version, I'm using pam-0.79-8.

Re: Problem with pam_wheel

Nick Lunt — Wed, 21 Jun 2006 09:54:26 GMT

That must be what it is then.

The latest update from redhat is pam-0.77-66.14 which ive just updated to, and that doesn't work properly either.

Im reluctant to upgrade all our systems with a non redhat supplied version of pam.

I guess were stuck without this functionality.

Thanks for your help Ivan,

Nick .