chuser su=false not working

[ranjit]

We are trying to prevent users from using su to switch to a particular account. We have successfully achieved this on an AIX 4.3.2.0 server using the command:

chuser su=false testuser

This does not work on AIX v 4.3.3.0 ML 09 - we are still able to su to the account although the testuser stanza in /etc/security/user is updated with the relevant su=false line.

Any ideas ?

 

[victorv]

hi,
are you trying su from root ?
bye

 

[ranjit]

No, we are trying to su to the testuser account from a non root account. We have also tested on AIX 5.1 which works as expected. The problem appears to be with AIX 4.3.3.0 ML09.

 

[victorv]

hi,
I don't belive the problem is ML9, however install 11.
I belive your machine has some problem.

vi /etc/security/user

and at : prompt enter
:set list

check for extra lines, extra space, extra tab
near your user.

bye