LinuxQuestions.org
Review your favorite Linux distribution.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 09-29-2004, 04:49 PM   #1
Darrell_Thomas_
LQ Newbie
 
Registered: Sep 2004
Posts: 2

Rep: Reputation: 0
ROOT LOGIN OK, su password NOT OK


This is the second time this happened.. (The first was right after I installed, so I just re-installed the system as a fix.-- I'd prefer not to do that.)

I have Mandrake 10.0, everything was working fine, and now I am unable to login as "su". I can logoff and log back in as ROOT, but I can't do any ROOT functions as myself.

Similar to last time, I just downloaded some "security-updates."

Any suggestions?
 
Old 09-29-2004, 08:22 PM   #2
Cerbere
Member
 
Registered: Dec 2002
Location: California
Distribution: Slackware & LFS
Posts: 799

Rep: Reputation: 33
Hey Darrell, welcome to LQ.org!

Take a look through your /etc directory to see if there's a file called /etc/suauth. This file will limit who can run su, and specifically which users can su to which uids. You can find more info on it by running 'man suauth'.

Also take a look at /etc/login.defs to see what the value of SU_WHEEL_ONLY is. If it is 'yes', then only users who belong to the 'wheel' group can su to root. Again, you can find more info with 'man login.defs'.

BTW when posting a question, try to give as much info as you can. for example, telling us that, 'I am unable to login as "su" ' isn't as helpful as telling us what happens when you try. Also, the first thing to look at when you have a problem is the man page for the problematic command. Running 'man su' will lead you to both of the suggestions I made above.

Enjoy!
--- Cerbere
 
Old 09-30-2004, 06:16 AM   #3
Darrell_Thomas_
LQ Newbie
 
Registered: Sep 2004
Posts: 2

Original Poster
Rep: Reputation: 0
I found the problem here. Here's what happened for others that may have the same:

I had recently done a CHOWN of the /bin directory so that I could graphically put files in there that I compiled. (I had put a simple C program that I had written in there to be able to execute).

su doesn't like it's permissions/owner changed. So I had to change it back to 04755 using [ ]$CHMOD 04755 su

this fixed the problem.
 
Old 10-19-2004, 02:32 PM   #4
zhjim
Senior Member
 
Registered: Oct 2004
Distribution: Debian Squeeze x86_64
Posts: 1,748
Blog Entries: 11

Rep: Reputation: 233Reputation: 233Reputation: 233
Hy all, at least someone who has the decint too write how he solved his problem .
I had the same one. And you solved it. :thumbs up:
But i got away with only execution rights for other.(left out read capability). I think main important on this one is the setguid bit.
I´m writing this for security only. So the last advice, definetly make a /etc/suauth file. The man page will tell you how the file has to look alike.

:edit is your option for chmod right (04755). Too me it seems there´s a zero to much? 4755 should be right?!?
Regards zhjim

Last edited by zhjim; 10-19-2004 at 02:34 PM.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
mysql: still can't login after root password reset andredude Linux - Software 4 12-19-2014 06:30 PM
Redhat 9 root login password jmzcons Linux - Software 1 02-27-2005 04:30 PM
Howto login as root with no password (automatically) vivekd Linux - Software 0 02-12-2004 04:29 AM
no password prompt after root login taboo Linux - General 1 12-22-2003 01:01 PM
Removing Root Password/Auto login friendklay Linux - General 7 05-13-2003 04:49 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 05:13 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration