"su $user" as root asks for a password

malo_umoran · 06-11-2007, 04:30 PM

Hi,

Slackware started asking me for a user password when I do "su mm" as a root. I don't have to enter the password, pressing Enter is enough.

Code:

root@jingle:/etc/pam.d# su mm
reenter password:
mm@jingle:/etc/pam.d$

I just pressed Enter after I was asked to "reenter password" and I was logged in as the user "mm".

When I want to login, everything is normal: enter username, press Enter, enter password, press Enter, done.

I checked /etc/pam.d/system-auth:

Code:

#%PAM-1.0
# This file is auto-generated.
# User changes will be destroyed the next time authconfig is run.
auth        required      /lib/security/pam_env.so
auth        sufficient    /lib/security/pam_unix.so try_first_pass nullok
auth        required      /lib/security/pam_deny.so 
account     required      /lib/security/pam_unix.so

password    required      /lib/security/pam_cracklib.so try_first_pass retry=3
password    sufficient    /lib/security/pam_unix.so try_first_pass use_authtok nullok md5 shadow
password    required      /lib/security/pam_deny.so
session     required      /lib/security/pam_limits.so
session     required      /lib/security/pam_unix.so

Any ideas? Am I searching on the right place?

Thanks

M.

rhussey · 06-11-2007, 05:27 PM

Hmmm... not sure. I think this might be a problem with your /etc/pam.d/su file. Check for a line like this at the top:
auth sufficient /lib/security/pam_rootok.so

Without that, root will need to enter a password. Here's my su file for reference, although I don't suggest copying it since it may be a different version.

Code:

#%PAM-1.0
auth            sufficient      pam_rootok.so
# Uncomment the following line to implicitly trust users in the "wheel" group.
#auth           sufficient      pam_wheel.so trust use_uid
# Uncomment the following line to require a user to be in the "wheel" group.
#auth           required        pam_wheel.so use_uid
auth            include         system-auth
account         sufficient      pam_succeed_if.so uid = 0 use_uid quiet
account         include         system-auth
password        include         system-auth
session         include         system-auth
session         optional        pam_xauth.so