[lug] Su problems

Dan Ferris dan at ferrises.com
Tue Nov 18 15:19:01 MST 2003


The password isn't changed, as I can log in as root via console and ssh 
using password.


D. Stimits wrote:

> Dan Ferris wrote:
> 
>> This is driving me nuts.
>>
>> The system is SuSE 9.0
>>
>> dferris at stargate:~> su
>> Password:
>> su: incorrect password
>> dferris at stargate:~>
>>
>> Now in /var/log/messages:
>>
>> pam_unix2: session started for user dferris, service su
>> pam_unix2: pam_sm_authenticate() called
>> pam_unix2: username=[root]
>> pam_unix2: wrong password, return PAM_AUTH_ERR
>> FAILED SU (to root) root on /dev/pts/2
>>
>> Here's the PAM configuration:
>>
>> #%PAM-1.0
>> auth sufficient         pam_rootok.so
>> auth requisite          pam_unix2.so    debug nullok     #set_secrpc
>> account required        pam_unix2.so    debug
>> password required       pam_unix2.so    debug nullok use_first_pass
>> use_authtok
>> session required        pam_unix2.so    debug
>>
>> There is NO reason why this should fail.  I type in the correct password
>> and it dies on me.
>>
>> Has ANYONE seen this before?
>>
>> Dan
>>
>> _______________________________________________
>> Web Page:  http://lug.boulder.co.us
>> Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug
>> Join us on IRC: lug.boulder.co.us port=6667 channel=#colug
>>
> If someone broke into the system and changed the pass this would happen. 
> Or if somehow shadow password got disabled/enabled (opposite of what it 
> was) this would also happen. Possibly also if the /etc/passwd file was 
> not world readable.
> 
> D. Stimits, stimits AT comcast DOT net
> 
> _______________________________________________
> Web Page:  http://lug.boulder.co.us
> Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug
> Join us on IRC: lug.boulder.co.us port=6667 channel=#colug
> 




More information about the LUG mailing list