su, pam, Red Hat 7.0: I made a boo-boo

su, pam, Red Hat 7.0: I made a boo-boo

Post by ChozSu » Sat, 24 Feb 2001 08:24:06



Greetings,

I screwed up royally.  Details, details.

I was trying to secure the su command and let only certain users execute it.
Keep in mind that I totally forgot about pam.

What I did was:
$ groupadd suers

$ vi /etc/group
~
suers:x:550:root,joe
~

$ chown root:suers /bin/su

Then when I tried to:

$ su -
Password:
Password Incorrect
$

even though I can logout and login as root.  So I know I am not crapping on
the root passwd.

I know now that all I had to do is uncomment certain lines in /etc/pam.d/su
and active the trusted group 'wheel' (and add certain people to wheel).

I tried to undo everything by:
$ chown root:root /bin/su

$ vi /etc/group
~
# suers:x:550:root,joe
~

But I still get the same "Password Incorrect".  If I try to vi /etc/pam.d/su
to activate 'wheel' as a trusted group, I do not get a chance to insert a
password... after I '$ su -', I get 'Password Incorrect' automatically.

This is a dodo question but can I reinstall su or pam and will that correct
everything?

Joe

 
 
 

su, pam, Red Hat 7.0: I made a boo-boo

Post by Cameron Ker » Sat, 24 Feb 2001 10:19:54




> Greetings,

> I screwed up royally.  Details, details.

> I was trying to secure the su command and let only certain users execute
> it. Keep in mind that I totally forgot about pam.

Why don't you just use sudo?

-- Cameron Kerr

 
 
 

su, pam, Red Hat 7.0: I made a boo-boo

Post by ChozSu » Sat, 24 Feb 2001 12:19:30


I figured it out anyway.

I had the wrong permission for /bin/su.

it should be:

-rwsr-xr-x

I should use sudo.

Joe




> > Greetings,

> > I screwed up royally.  Details, details.

> > I was trying to secure the su command and let only certain users execute
> > it. Keep in mind that I totally forgot about pam.

> Why don't you just use sudo?

> -- Cameron Kerr

 
 
 

1. The server made a boo boo error, please help

I'm sorry if this has been posted a thousand times before but I am new to
this NG so accept my apologies in advance if it has been.

I am trying to setup a few www board on my linux server running the latest
version of apache but when the wwwboard tries to  POST to
cgi-bin/wwwboard.pl I get this error (The Server Made a Boo Boo) I believe
this is error#500 or 501  but I would like to know if someone can tell me
what I have to do to remove problem and allow the POST , I am also running
password *.pl scripts with no problems at all so I know PERL is installed
correctly and the directory information is correct, it's only when something
is trying to POST do I get this error.
Can someone help me!!!

Thanks in advance

2. kaffe-1.0.b3 (on NetBSD/sparc) anyone?

3. root "no shell" boo-boo

4. Internal modem and printing

5. Sol2.6 realloccg: fs full - is my FS boo-boo?

6. kmail question

7. root "no shell" boo-boo

8. Find out CPU speed and RAM for RS6000?

9. boo-boo follow-up

10. Boo-boo in XFree86 1.3 linux binaries (Cirrus driver)

11. Root boo boo

12. Upgrade Boo Boo....

13. Red Hat 7.1 - Installing Red Hat packages after Red Hat is already installed.