I am running Mandrake 10.1 on a server at work. There seems to be a issue with this server. I go to log in and find that I nolonger need to supply a password during login. It also scares me that I can su to root with out the root password. It is like this with all acounts. I am stumped on where to look. I am worrying a root kit could have been abled. When I ssh in I have to supply a password and not just press enter. But infront of the box it is un needed. This is a large security flaw. I cannot wipe the server because I have users that are using it though out the day for data and services.

Thanks for any help!!

Jason

try changing your root password, check your /etc/pam.d/su and sudo files
download chkrootkit and check for any anomalies.
if indeed you have been infected by a rootkit, you would seriously want to take the box offline first and investigate further.
take backup of your files/logs and keep them for further research.