LinuxQuestions.org
Support LQ: Use code LQ3 and save $3 on Domain Registration
Go Back   LinuxQuestions.org > Forums > Other *NIX Forums > AIX
User Name
Password
AIX This forum is for the discussion of IBM AIX.
eserver and other IBM related questions are also on topic.

Notices



Reply
 
Search this Thread
Old 09-13-2012, 07:36 AM   #1
manoj.linux
Member
 
Registered: Aug 2007
Posts: 231

Rep: Reputation: 15
Question not able to su - root


Hi,

I am not able to su - root, below are permission set on su

bash-3.00$ su -
root's Password:
3004-307 You are not allowed to su to this account.

bash-3.00$ ls -l su
-r-sr-xr-x 1 root security 32732 Apr 03 2009 su



Please suggest.
 
Old 09-13-2012, 07:49 AM   #2
pixellany
LQ Veteran
 
Registered: Nov 2005
Location: Annapolis, MD
Distribution: Arch/XFCE
Posts: 17,802

Rep: Reputation: 729Reputation: 729Reputation: 729Reputation: 729Reputation: 729Reputation: 729Reputation: 729
I'm not sure it has anything to do with the permissions on the "su" executable file---can you "su" to any user?

Who is in the "security" group
 
Old 09-13-2012, 07:51 AM   #3
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,415

Rep: Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968
All part of the standard configuration, plenty of docs around if you look - http://www.ibm.com/developerworks/ai...oup/index.html
 
Old 09-17-2012, 01:16 AM   #4
manoj.linux
Member
 
Registered: Aug 2007
Posts: 231

Original Poster
Rep: Reputation: 15
Question

Thanks acid_kewpie for your response. I have checked the site, and checkef on server , as for as settings are concerned itlook OK, but still unable to get the root cause for unable to su -.

I am able to su - to any oher Normal user then root.

# lsuser -a sugroups root
root sugroups=All
 
Old 09-17-2012, 06:53 AM   #5
NevemTeve
Senior Member
 
Registered: Oct 2011
Location: Budapest
Distribution: Debian/GNU/Linux, AIX
Posts: 1,935

Rep: Reputation: 524Reputation: 524Reputation: 524Reputation: 524Reputation: 524Reputation: 524
Are you member of group security or not?
 
Old 09-18-2012, 12:38 AM   #6
manoj.linux
Member
 
Registered: Aug 2007
Posts: 231

Original Poster
Rep: Reputation: 15
Question

Yes,

Below is output of id command.

bash-3.00# id
uid=0(root) gid=0(system) groups=2(bin),3(sys),7(security),8(cron),10(audit),11(lp)
 
Old 09-18-2012, 03:11 AM   #7
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,415

Rep: Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968
what? But.. you ARE root..??? AND very very clearly NOT in the sugroups group. Did you not read anything we've said?

Last edited by acid_kewpie; 09-18-2012 at 03:19 AM.
 
Old 09-18-2012, 04:33 AM   #8
NevemTeve
Senior Member
 
Registered: Oct 2011
Location: Budapest
Distribution: Debian/GNU/Linux, AIX
Posts: 1,935

Rep: Reputation: 524Reputation: 524Reputation: 524Reputation: 524Reputation: 524Reputation: 524
Yes, it's a bit confusing: you are root-user, and you want to execute 'su -'? Why?
 
Old 09-20-2012, 12:08 AM   #9
manoj.linux
Member
 
Registered: Aug 2007
Posts: 231

Original Poster
Rep: Reputation: 15
Question

Thanks acid_kewpie , NevemTeve for your response.

the output which I have send is from VIO Server then mkvt -id (problematic server), not Directly from vio client (Problematic Server),

we dont have directly root login enabled.

I am a able to su to any normal user other then root,

I have checked root is in su groups

# lsuser -a sugroups root
root sugroups=All
 
Old 09-20-2012, 03:28 AM   #10
NevemTeve
Senior Member
 
Registered: Oct 2011
Location: Budapest
Distribution: Debian/GNU/Linux, AIX
Posts: 1,935

Rep: Reputation: 524Reputation: 524Reputation: 524Reputation: 524Reputation: 524Reputation: 524
No. The user that wants to became root should be in the group security (or which), not the root itself.
 
Old 09-21-2012, 01:09 AM   #11
cliffordw
Member
 
Registered: Jan 2012
Location: South Africa
Posts: 281

Rep: Reputation: 118Reputation: 118
Quote:
Originally Posted by manoj.linux View Post
the output which I have send is from VIO Server then mkvt -id (problematic server), not Directly from vio client (Problematic Server),
Am I reading this correctly - is it on a VIO server (rather than an AIX partition) that you are trying to su to root? The normal way of becoming root on a VIO server is with the
Quote:
oem_setup_env
command, and not with su.
 
Old 09-21-2012, 02:17 AM   #12
manoj.linux
Member
 
Registered: Aug 2007
Posts: 231

Original Poster
Rep: Reputation: 15
This is on AIX Partition only not on vio server.
 
Old 09-21-2012, 02:53 AM   #13
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,415

Rep: Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968
Quote:
Originally Posted by manoj.linux View Post
This is on AIX Partition only not on vio server.
Don't say things that are not relevant then.

We've told you what's wrong, and asked you questions you've not answered... what else do you expect from us??
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
how can i write to a root:root 750 file with a non-root user? Droa Linux - Newbie 1 05-14-2012 08:49 PM
[SOLVED] how can i remount root filesystem as read/write after modify readonly-root file jcwkyl Linux - Newbie 3 12-21-2010 11:40 PM
How can I have a script owned as root and run as root by a user: setuid? stickey bit? abefroman Linux - Newbie 9 04-19-2008 06:15 PM
why lftp command run failed when user isn't root, but ok when logining as root steven_yu Linux - Software 0 06-06-2007 09:36 PM
root files: create as root:root or root:wheel? pcass Linux - Security 1 02-07-2004 05:14 PM


All times are GMT -5. The time now is 07:46 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration