| View previous topic :: View next topic |
| Author |
Message |
coralsaw
n00b
Joined: 09 Jun 2005
Posts: 57
|
 Posted: Fri Jun 17, 2005 6:44 am Post subject: Cannot SU over SSH [SOLVED] |
 |
|
Hello,
SSH for normal users works fine (over STUNNEL, thx to helpful suggestions). However, I can't SU once I login in as normal user.
- Same normal user can SU locally
- PermitRootLogin set to 'NO' in /etc/sshd_config. Shouldn't this only be for direct root logins, and not SU?
Any help is appreciated,
TiA
/coralsaw
Last edited by coralsaw on Fri Jun 17, 2005 12:46 pm; edited 1 time in total |
|
| Back to top |
|
 |
Kruegi
Guru
Joined: 09 Feb 2005
Posts: 406
Location: Clausthal-Zellerfeld; DE
|
| Posted: Fri Jun 17, 2005 6:50 am Post subject: |
|
|
Is the user in wheel group?
Thomas |
|
| Back to top |
|
|
mattmatteh
Guru
Joined: 10 Mar 2004
Posts: 449
Location: near chicago
|
| Posted: Fri Jun 17, 2005 6:50 am Post subject: |
|
|
can you copy the exact terminal output with the rejection?
matt |
|
| Back to top |
|
|
coralsaw
n00b
Joined: 09 Jun 2005
Posts: 57
|
| Posted: Fri Jun 17, 2005 7:30 am Post subject: |
|
|
Kruegi,
the user can SU locally, so he should be in the wheel group.
mattmatteh,
Here's the (sanitized) output from SU:
| Code: | Using username "user".
user@host's password:
Last login: Fri Jun 17 09:54:17 2005 from localhost
[10:28][user:~]$ su
Password:
su: Permission denied
Sorry. |
Another added bit of info is that "user" cannot even SU as "user", so it might not have anything to do with root privileges.
/coralsaw |
|
| Back to top |
|
|
coralsaw
n00b
Joined: 09 Jun 2005
Posts: 57
|
| Posted: Fri Jun 17, 2005 10:05 am Post subject: |
|
|
Update: The user is NOT in the wheel group, this should explain it.
I'm 100% sure that I've SUed from this user two days ago, how could it have been changed? 
/coralsaw |
|
| Back to top |
|
|
nephros
Advocate
Joined: 07 Feb 2003
Posts: 2139
Location: Graz, Austria (Europe - no kangaroos.)
|
| Posted: Fri Jun 17, 2005 11:35 am Post subject: |
|
|
| coralsaw wrote: | Update: The user is NOT in the wheel group, this should explain it.
I'm 100% sure that I've SUed from this user two days ago, how could it have been changed?
|
couldn't. Except if you weren't paying attention with etc-update and it "updated" your groups file.
_________________
Please put [SOLVED] in your topic if you are a moron. |
|
| Back to top |
|
|
coralsaw
n00b
Joined: 09 Jun 2005
Posts: 57
|
| Posted: Fri Jun 17, 2005 12:46 pm Post subject: |
|
|
Quite possible. I'll mark this solved. Thx.
/coralsaw |
|
| Back to top |
|
|
|
Networking & Security
