su with user root to a diff user request password

[eran maor]

Hi

i m working with hp-ux 10.20 on a trusted system in b-2000.

when i m trying to su to a diff user i req. to put a password .
the pathc pgco_14258 is not install but i have a diff computer without this patch that is also a trusted system and there it work fine

[Vincenzo Restuccia]

In s700_800 10.20 su(1) cumulative patch(PHCO_14258) see :
"
PHCO_14258 patch description

Note: Obtaining software or data from HP's Patch Database is governed by the IT Resource Center Terms of Use. Use of software or data obtained from HP's Patch Database is governed by HP Software License Terms. Please read them before you proceed.



--------------------------------------------------------------------------------





patch files dependencies supersedes size critical symptoms defect description installation instructions

Patch Name: PHCO_14258

Patch Description: s700_800 10.20 su(1) cumulative patch

Creation Date: 98/02/20

Post Date: 98/02/23

Hardware Platforms - OS Releases:
s700: 10.20
s800: 10.20

Products: N/A

Filesets:
OS-Core.UX-CORE

Automatic Reboot?: No

Status: General Release

Critical: No

Path Name: /hp-ux_patches/s700_800/10.X/PHCO_14258 (53862)
Symptoms:
PHCO_14258:
- su does not initialize the groups correctly

PHCO_9559:
- a password is requested when root su's to another user"

[eran maor]

Hi

i saw the dis. of the patch but why it is happaning in one computer and in a diff. computer with the same config ( o.s and patch level ) it is doesnt happen ?

[Vincenzo Restuccia]

PHCO_9559 or PHCO_14258 are a bundle ?

[eran maor]

Hi

i change the 2 patches .
the are not install in the 2 computer but one
oper good and the other one no.

do you think that i must install the pathc phco_14258 ( he replace the phco_9559) ??

[Ravi_8]

hi,

the patch doesn't do any job in this case
if u use #su username shell will be changed to user shell but u can't see any of his file(s).
whereas #su - username will request passwd, if provided it take u to user home dir, where u can see user file(s)

[Vincenzo Restuccia]

PHCO_14258 replace PHCO_9559 install it.

[eran maor]

Hi Vincenzo

i will install the patch but i dont like to install patches if i dont have to .

and i have one computer with the same patch level and o.s .
but thanks a lot for the help

[Shannon Petry]

A word of advice about installing patches.
The concept of a patch is to fix/update or enhance products installed to the current operating system release. This is the only mechanism for fixing bugs in code shipped with your machines.

HP, Sun, IBM, Irix, and Linux all have a mechanism making it easy to update software with "patches". This means you dont have to apply binaries at single user mode, nor compile your own binaries to fix problems you find in the code.

Since the vendor makes the effort to fix what is broken via a patch, I can scarcely understand why someone responsible for a machine says they dont like patches!?!?!?!?

I.E. Last summer people found a bug in Irix's telnet server. It took seconds to gain root access to an Irix box. What kind of an admin would not install the patch supplied by SGI to fix it? Either a real lazy one, or someone who does not care about his machine, or know what a root exploit is.

Patches won't go away anytime soon, so I'd suggest you learn to at least like them! I have rules about testing before applying patches to production boxes, but in general I'm within 4 months of patch levels on even production boxes. It's saved me many of times from having to chase problems down or reconfigure in a hurry!

Regards,
Shannon

[eran maor]

Hi shannon

i didnt say it on critical patches .
this patch isnt ciritcal patch .

my que. was why do i have to install a patch to fix a problem what i have the same computer with the same os and the same patch level without this patch install and all is o.k

i dont think that you should install all the patches that hp created .

if you know the number of patches that hp have you know what i mean .

also which system admin is trying to install a patch to solve the problem without doing a little trubleshoot of the problem .

and one more word .
i m working at hp israel , one of my jobs is taking care of the xpatches computer and i know what is a critical patch and i m not leasy with installing patches .
i m doing it for 2 years !!!