[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[cobalt-users] URGENT: Cannot su - while being admin
- Subject: [cobalt-users] URGENT: Cannot su - while being admin
- From: Octavio Heredia <oheredia@xxxxxxxxxx>
- Date: Mon Jan 7 13:50:17 2002
- List-id: Mailing list for users to share thoughts on Cobalt products. <cobalt-users.list.cobalt.com>
Hello list,
After spending pretty much all day search the knowledge best, this list's
archives & Google not finding an answer to my problem, I have come to seek
your help.
WHAT IS WRONG...
1.- This morning I logged into our server as admin (over ssh of course!)
upon trying to su - (to read a couple of logs) the server would not allow me
to do so. It would come back similarly as when any other user tries to su
(su: incorrect password).
2.- On my site I have a cgi that is owned by admin:
-rwxr-xr-x 1 admin site# 2957 Apr 26 2001 search.cgi
however when I try to execute this script I get the following error:
CGIWrp Error: Execution of this script not permitted
Execution of (admin) is not permitted for the following reason:
User not Privileged.
WHAT I DID...
I believe the source of my problems was adding admin to a new group using
the command line. I was logged in as root (su - ) and executed the command:
' usermod -G admin site4 ' to add the admin user to site4 group. I logged
out and that was the last time I could have root's privileges. I don't have
access to the logs since they are owned by root and cannot even ftp them
locally to view them. This is the output to check what groups admin belongs
to
[admin /etc]$ groups admin
admin : admin
WHAT I HAVE DONE...
I got rid of site4 and rebooted my server. This eliminated site4 from my
groups file and removed it from the admin user as well, however the problem
is still there.
I would appreciate your input, it is a production server (learned a lesson
today!) thus I would appreciate alternatives to having to restore the server
from the cd (it is also collocated adding yet another twist to the
situation). Please let me know what avenues/options do I have. I cannot
admin a server effectively if I don't have root access. Thank you very much
for your help.
Octavio Heredia
Corporate Systems
Web Developer
oheredia AT csedge DOT com
begin 666 InterScan_Disclaimer.txt
M5&AE(&EN9F]R;6%T:6]N(&-O;G1A:6YE9"!I;B!T:&ES(&4M;6%I;"!I<R!S
M=')I8W1L>2!C;VYF:61E;G1I86P@86YD(&9O<B!T:&4@:6YT96YD960@=7-E
M(&]F('1H92!A9&1R97-S964@;VYL>3L@:70@;6%Y(&%L<V\@8F4@;&5G86QL
M>2!P<FEV:6QE9V5D(&%N9"]O<B!P<FEC92!S96YS:71I=F4N("!.;W1I8V4@
M:7,@:&5R96)Y(&=I=F5N('1H870@86YY(&1I<V-L;W-U<F4L('5S92!O<B!C
M;W!Y:6YG(&]F('1H92!I;F9O<FUA=&EO;B!B>2!A;GEO;F4@;W1H97(@=&AA
M;B!T:&4@:6YT96YD960@<F5C:7!I96YT(&ES('!R;VAI8FET960@86YD(&UA
M>2!B92!I;&QE9V%L+B @268@>6]U(&AA=F4@<F5C96EV960@=&AI<R!M97-S
M86=E(&EN(&5R<F]R+"!P;&5A<V4@;F]T:69Y('1H92!S96YD97(@:6UM961I
M871E;'D@8GD@<F5T=7)N(&4M;6%I;"X*"D-O<G!O<F%T92!3>7-T96US+"!)
M;F,N(&AA<R!T86ME;B!E=F5R>2!R96%S;VYA8FQE('!R96-A=71I;VX@=&\@
M96YS=7)E('1H870@86YY(&%T=&%C:&UE;G0@=&\@=&AI<R!E+6UA:6P@:&%S
M(&)E96X@<W=E<'0@9F]R('9I<G5S97,N("!792!A8V-E<'0@;F\@;&EA8FEL
M:71Y(&9O<B!A;GD@9&%M86=E('-U<W1A:6YE9"!A<R!A(')E<W5L="!O9B!S
M;V9T=V%R92!V:7)U<V5S(&%N9"!A9'9I<V4@>6]U(&-A<G)Y(&]U="!Y;W5R
M(&]W;B!V:7)U<R!C:&5C:W,@8F5F;W)E(&]P96YI;F<@86YY(&%T=&%C:&UE
%;G0N#0H
end