Subject: RE: cannot su to root
From: Leif Sawyer (lsawyer@gci.com)
Date: Thu Nov 06 2003 - 13:10:18 AKST
Tim,
Make sure you're user is part of the wheel group
> -----Original Message-----
> From: Tim Jordan [mailto:timothy_jordan@labor.state.ak.us]
> Sent: Thursday, November 06, 2003 12:28 PM
> To: aklug@aklug.org; samba@samba.org
> Subject: cannot su to root
>
>
>
> I've been messing with pam and winbind. Somehow I have it so
> I can't su
> to root in a shell when I'm logged in as a non-root users.
>
> These are my pam.d configs I've been messing with, perhaps I'm missing
> something obvious...help please,
> Tim
>
> /etc/pam.d/login
>
>
> > #%PAM-1.0
> >
> > auth required /lib/security/pam_securetty.so
> > auth required /lib/security/pam_nologin.so
> > auth sufficient /lib/security/pam_winbind.so
> > auth required /lib/security/pam_env.so
> > auth required /lib/security/pam_unix.so
> use_first_pass nullok
> >
> > account sufficient /lib/security/pam_winbind.so
> > account required /lib/security/pam_unix.so
> >
> > password sufficient /lib/security/pam_cracklib.so
> > password sufficient /lib/security/pam_unix.so shadow
> nullok use_authtok
> >
> > session required /lib/security/pam_mkhomedir.so
> skel=/home/LABOR/skel$se$
> **************************************************************
> *********************
> /etc/pam.d/system-auth
>
> > auth required /lib/security/pam_env.so
> > auth sufficient /lib/security/pam_winbind.so
> > auth sufficient /lib/security/pam_unix.so
> likeauth nullok use_f$
> > auth required /lib/security/pam_deny.so
> >
> > account sufficient /lib/security/pam_unix.so
> > account sufficient /lib/security/pam_winbind.so
> >
> > password required
> /lib/security/pam_cracklib.so retry=3 minlen=2 $
> > password sufficient /lib/security/pam_unix.so
> nullok use_authtok md$
> > password required /lib/security/pam_deny.so
> >
> > session required /lib/security/pam_limits.so
> > session required /lib/security/pam_unix.so
> >
>
>
> ---------
> To unsubscribe, send email to <aklug-request@aklug.org>
> with 'unsubscribe' in the message body.
>
-- Binary/unsupported file stripped by Listar --
-- Type: application/x-pkcs7-signature
-- File: smime.p7s
---------
To unsubscribe, send email to <aklug-request@aklug.org>
with 'unsubscribe' in the message body.
This archive was generated by hypermail 2a23 : Thu Nov 06 2003 - 13:10:13 AKST