Cannot su to root

[mb37]

Hi,

We a problem when trying to su to root, we get the error message "Cannot su to "root" : Authentication is denied."

However we can login remotely as root with the password and it works ok.

SU groups are set to ALL
Another user can SU to user is set to true
Account is not locked

Can anybody help.

Thanks
Mark

 

[sushveer]

Hi mb37

For remote logins ...are you using rsh or ssh?

sushveer
IBM certified specialist-p-series AIX5L System Administration
AIX/SOLARIS/WEBSPHERE-MQ/TIVOLI Administrator

 

[sbrews]

Sounds like su'ing to root has been disabled. To check/fix:

1.) smit
2.) Security & Users
3.) Users
4.) Change/Show Characteristics of a User
5.) enter root for the user name
6.) Check to see if "Another user can SU TO USER" is set to true.
7.) Check this on the account that is trying to su too.

Most likely cause is that the above is set to false on the root account.

scott

ps - logging in as root over the network is a bad idea. Anyone with a network sniffer can capture your password. Just my $0.02 worth.

 

[mb37]

We are using telnet to log on remotely. Machine is usually more secure than this but enabled remote login as a test.

As per my first post the "Another user can SU to user" is set to true.

Thanks for your replies.

Mark

 

[mb37]

Chaps,

Found the solution.

Someone had changed the suid bit on the /usr/bin/su. Chmod u+s /usr/bin/su did the trick.

Thanks
Mark