1835243 Members
2009 Online
110078 Solutions
New Discussion

Re: su - root

 
Fuad_1
Regular Advisor

su - root

I have two users in different groups, and both have the root password. One can issue su - root and enter the system and the second one is not. Can any one explain this?
Set goals, and work to achieve them
10 REPLIES 10
Pete Randall
Outstanding Contributor

Re: su - root

Do you have SU_ROOT_GROUP= set in /etc/default/security?

Pete

Pete
Fuad_1
Regular Advisor

Re: su - root

Hi,

No, i don't have it.
Set goals, and work to achieve them
Darren Prior
Honored Contributor

Re: su - root

Hi,

What error messages are you seeing for the failed attempt? Is anything showing up in syslog?

Are both users using the same su command, check by giving the full path /usr/bin/su?

Is your system trusted, or using NIS? Is it only the root account that is affected?

regards,

Darren.
Calm down. It's only ones and zeros...
harry d brown jr
Honored Contributor

Re: su - root


What OS release?

What was the last patch bundle installed?

What groups does user1 belong to that user2 does not?

What is the error message that user2 receives when they can't su to root?

live free or die
harry
Live Free or Die
Fuad_1
Regular Advisor

Re: su - root

The one that can login is in "users" group, and the one can not is in "ora" group. The message error is "su:sorry".
Set goals, and work to achieve them
Pete Randall
Outstanding Contributor

Re: su - root

That sounds like they're entering the wrong password. Have you tried this yourself?

Pete

Pete
Ravi_8
Honored Contributor

Re: su - root

Hi,
could u change the users secondary group to the primary of another
never give up
Fuad_1
Regular Advisor

Re: su - root

I have tried both with the correct password.
Set goals, and work to achieve them
Sanjay_6
Honored Contributor

Re: su - root

Hi Faud,

Have you checked the path to su command for both the users.

For each user, try

$type su

or

$which su

Hope this helps.

regds
john korterman
Honored Contributor

Re: su - root

Hi Fuad,

long shot... but does the second user have an alias set up for the "su" command? I have tried to simulate the behaviour of your second user by setting up this alias:

# alias 'su'='su - jxk'

on a system where the user jxk exists. It could be that the second user had something similar to that.

Regards,
John K.
it would be nice if you always got a second chance