LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware
User Name
Password
Slackware This Forum is for the discussion of Slackware Linux.

Notices

Reply
 
LinkBack Search this Thread
Old 07-31-2007, 10:06 AM   #1
BashTin
Member
 
Registered: May 2003
Location: West Midlands, United Kingdom.
Distribution: Slackware 13.37
Posts: 247

Rep: Reputation: 32
su no longer works


Hi all, back for more

Ok this is, hopefully, just a quick one.

Su no longer works either from the shell or console. I know I type in the pw correctly but it is always rejected.

However when I logout to the X session manager, select user root, I can login no problem.

So any ideas??

Thanks in advance, all advice much appreciated as always.

BashTin.

PS: On slack 11.0

Last edited by BashTin; 07-31-2007 at 10:08 AM.
 
Old 07-31-2007, 10:19 AM   #2
erklaerbaer
Member
 
Registered: Mar 2006
Posts: 381

Rep: Reputation: 30
caps lock , num lock , different keyboard layout?
 
Old 07-31-2007, 10:20 AM   #3
forrestt
Senior Member
 
Registered: Mar 2004
Location: Cary, NC, USA
Distribution: Fedora, Kubuntu, RedHat, CentOS, SuSe
Posts: 1,288

Rep: Reputation: 99
Have you tried 'su -' instead of just 'su'?
 
Old 07-31-2007, 10:34 AM   #4
BashTin
Member
 
Registered: May 2003
Location: West Midlands, United Kingdom.
Distribution: Slackware 13.37
Posts: 247

Original Poster
Rep: Reputation: 32
caps lock..... no
num lock..... no
different keyboard layout....no. Tried all those under the settings menu, just the same result.

Have you tried 'su -' instead of just 'su'? Yeah tried that, still the same.

Incidentally, and I know I shouldn't, but if I just type the pw on the command line it is correct so it tends to suggest it is an authentication issue rather than an input issue, wouldn't you think?

Thanks, BashTin.
 
Old 07-31-2007, 12:48 PM   #5
forrestt
Senior Member
 
Registered: Mar 2004
Location: Cary, NC, USA
Distribution: Fedora, Kubuntu, RedHat, CentOS, SuSe
Posts: 1,288

Rep: Reputation: 99
I would say it is either an authentication issue (pam may be blocking su to root) or something in your environment is causing you to immediately log out (that was why my first question). Look at http://www.redhat.com/docs/manuals/e...rivileges.html for more info. I know it is Red Hat and not Slackware, but the concepts should be the same.
 
Old 07-31-2007, 02:42 PM   #6
erklaerbaer
Member
 
Registered: Mar 2006
Posts: 381

Rep: Reputation: 30
slackware doesn't have pam, but i think an immediate logout is our best bet here.
 
Old 07-31-2007, 02:52 PM   #7
jlliagre
Moderator
 
Registered: Feb 2004
Location: Outside Paris
Distribution: Solaris10, Solaris 11, Mint, OL
Posts: 9,459

Rep: Reputation: 352Reputation: 352Reputation: 352Reputation: 352
Su sbit removed ?
What says:
Code:
ls -l /bin/su
 
Old 08-01-2007, 02:01 AM   #8
BashTin
Member
 
Registered: May 2003
Location: West Midlands, United Kingdom.
Distribution: Slackware 13.37
Posts: 247

Original Poster
Rep: Reputation: 32
This is the result of 'ls -l /bin/su'

-rws--x--x 1 root root 31776 2006-08-23 04:08 /bin/su*

Thanks for all the replies so far.

Ater I type the pw in all I get is the message 'sorry'.

BashTin.
 
Old 08-01-2007, 02:26 AM   #9
jlliagre
Moderator
 
Registered: Feb 2004
Location: Outside Paris
Distribution: Solaris10, Solaris 11, Mint, OL
Posts: 9,459

Rep: Reputation: 352Reputation: 352Reputation: 352Reputation: 352
It could be your system has been hacked and a malicious su is installed.

You may want to try rootkit hunter for figuring it out: http://sourceforge.net/projects/rkhunter/
 
Old 08-01-2007, 04:28 AM   #10
BashTin
Member
 
Registered: May 2003
Location: West Midlands, United Kingdom.
Distribution: Slackware 13.37
Posts: 247

Original Poster
Rep: Reputation: 32
Run rkhunter and comes up clean, except a few warnings about httpd time services.
 
Old 08-01-2007, 05:02 AM   #11
jlliagre
Moderator
 
Registered: Feb 2004
Location: Outside Paris
Distribution: Solaris10, Solaris 11, Mint, OL
Posts: 9,459

Rep: Reputation: 352Reputation: 352Reputation: 352Reputation: 352
Are other files in /bin also having a modify time around 2006-08-23 04:08 ?
 
Old 08-01-2007, 07:00 AM   #12
BashTin
Member
 
Registered: May 2003
Location: West Midlands, United Kingdom.
Distribution: Slackware 13.37
Posts: 247

Original Poster
Rep: Reputation: 32
jlliagre edited result of 'ls -lt /bin' and (don't flame me now) but this has been irritating me a while but I have just had to login to root from x session manager. BUT, if I recall correctly, this issue seemed to arise after I recompiled the kernel...

60 -rwsr-xr-x 1 root root 60576 2006-09-25 16:48 mount*
20 -rwxr-xr-x 1 root root 18368 2006-09-25 16:48 setterm*
452 -rwxr-xr-x 1 root root 459880 2006-09-25 16:48 sln*
32 -rwsr-xr-x 1 root root 31796 2006-09-25 16:48 umount*
52 -rwxr-xr-x 1 root root 51364 2006-09-20 02:46 gzip*
28 -rwxr-xr-x 1 root root 27880 2006-09-18 15:39 bzip2*
8 -rwxr-xr-x 1 root root 7576 2006-09-18 15:39 bzip2recover*
44 -rwxr-xr-x 1 root root 44856 2006-08-23 04:08 login*
32 -rws--x--x 1 root root 31776 2006-08-23 04:08 su*
192 -rwxr-xr-x 1 root root 192720 2006-08-21 12:27 tar*
116 -rwxr-xr-x 1 root root 115580 2006-08-21 12:27 tar-1.13*
32 -rws--x--x 1 root root 29364 2006-08-14 06:20 ping*
28 -rws--x--x 1 root root 26764 2006-08-14 06:20 ping6*
4 -rwxr-xr-x 1 root root 3884 2006-08-14 06:19 ipmask*
72 -rwxr-xr-x 1 root root 71984 2006-08-14 06:19 telnet*
68 -rwxr-xr-x 1 root root 66212 2006-08-14 06:18 ftp*

BashTin
 
Old 08-01-2007, 09:32 PM   #13
BashTin
Member
 
Registered: May 2003
Location: West Midlands, United Kingdom.
Distribution: Slackware 13.37
Posts: 247

Original Poster
Rep: Reputation: 32
Ok sorted it.

Of course the solution was obvious and simple....

change root pw!!

Thanks for all your help and suggestions, BashTin.
 
Old 08-01-2007, 09:33 PM   #14
BashTin
Member
 
Registered: May 2003
Location: West Midlands, United Kingdom.
Distribution: Slackware 13.37
Posts: 247

Original Poster
Rep: Reputation: 32
Ok sorted it.

Of course the solution was obvious and simple....

change root pw!!

Thanks for all your help and suggestions, BashTin.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are Off
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Kopete no longer works JBailey742 Linux - Software 2 07-22-2006 10:58 PM
HP ScanJet No Longer Works shortsword Linux - Hardware 1 01-09-2005 08:17 PM
./configure no longer works xecuter Linux - Newbie 2 07-24-2004 11:06 AM
Abiword no longer works KMcD Linux - Software 2 03-31-2004 03:56 AM
Modem no longer works infornography Linux - General 3 11-07-2003 11:14 AM


All times are GMT -5. The time now is 06:59 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration