SU restriction using PAM

[Selvakumar_4]

Hi,

Just I would like to do su restriction to oracle user same like su to root.

How can we configure this in /etc/pam.conf.

Thanks,
Selva

[Marcel Boogert_1]

Selva,

Try this link:

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=907911

Regards, MB.

[Selvakumar_4]

MB,

Thanks for your response.
I don't have /etc/pam.d in my HP system.
I have only 2 files in /etc

1. pam.conf
2. pam_user.conf

Thanks,
Selva

[Ivan Ferreira]

I believe that what you want cannot be done with pam. But you can use sudo, and enable a specific list of users use su - oracle:

# visudo

User_Alias ORACLESU = user1, user2, user3

ORACLESU ALL = /usr/bin/su - oracle

[Selvakumar_4]

Ivan,

Thanks. In our environment we are not encouraging SUDO. Do I need latest PAM to achieve this. Because we could do in Linux.

Pls advice.

Thanks,
Selva