PAM problem with chroot & sudo

[b-rachid]

Hi Gurus,

I need to create a "chrooted" account named "indus" on HP-UX 11.11

I create a chroot shell for this account:

# vi /bin/chroot-shell
#!/bin/sh
/opt/iexpress/sudo/bin/sudo /usr/sbin/chroot /home/indus /bin/su - indus

I put /bin/chroot/shell as the connexion shell for user "indus" on /etc/passwd

After this I created all the directories, binaries and library files needed by "indus" in his jail environment

Then I give "indus" the right to make a chroot command by invoking visudo and adding the line below:

indus ALL= NOPASSWD: /usr/sbin/chroot /home/indus /bin/su - indus

When trying to be connected as user"indus" I get the following error:

pam_start: Check /etc/pam.conf
su: Sorry

Any help please, I prefer using sudo not RBAC