cannot use su to switch to root

[Tom Reeve]

When I attempt to su to root, either as a regular user or after being logged in as root, I get an error:

xxxxxxxx[/]-241# su -
su: You do not have the ability to su to root
xxxxxxxx[/]-242# which su
/usr/bin/su
xxxxxxxx[/]-243# ll /usr/bin/su
-rwsr-xr-x 1 root sys 69632 Oct 25 2000 /usr/bin/su

I saw a lot of posts from people wanting this functionality, but none about why su might be acting this way. Sudo is present but not active and there is no /etc/securetty file. I can su from root to a regular user. Ideas? Thanks in advance.

-Tom

[James R. Ferguson]

Hi Tom:

Try 'chown'ing to "root:bin" rather than "root"sys". I'd also take the write-permission off the owner. I have:

-r-sr-xr-x 1 root bin 24576 Aug 6 1998 /usr/bin/su

...JRF...

[A. Clay Stephenson]

Hi Tom,
What OS are you running? 11x has a feature that can be enabled if a patch was installed
that only allows members of group su to su - root. (PHCO_16127) Since you mentioned that sudo was installed, it too can controll access - examine /etc/sudoers.

[Vincenzo Restuccia]

s700_800 11.00 su(1) cumulative patch(PHCO_16127)

s700_800 10.20 su(1) cumulative patch(PHCO_14258)