Re: [cobalt-users] was - SU from user other ... - now SU won't work

[Tomas Garcia Ferrari <tgf@xxxxxxxxxxx>]

Hi,

I am truly sorry. I was trying to help, not to complicate your life...

After modifiying your su file, you should modify your users so they belong
to the group 'wheel' (which will be then allowed to su to root.) You can do
this with this command:
    usermod -G10 admin
    (supposing that the wheel group's id is '10' and your user is 'admin')

Probably that's why now you can not su to root: your user is not belonging
to the wheel group.

Did you try to directly login as root? Maybe this is still working and from
there you can change your user groups.

Regards,
Tomás


> ok, I implemented the two lines suggested by Tomas and later by flash22, ie:
> 
> auth sufficient /lib/security/pam_rootok.so debug
> auth required /lib/security/pam_wheel.so group=wheel
> 
> 
> into pam.d
> 
> Thanks - thanks a lot!  Now SU don't work PERIOD!
> 
> So I've now got a RAQ3 without the ability to SU to root.
> 
> So I thought, no problem, I'll make a setuid bash on the raq4, tar it across
> and execute it, reset my pam.d and I'm fine - only it don't work - the setuid
> bit falls off and now I'm totally cranky...
> 
> I'm leaving the machine alone for a while, and posting here, in the hope that
> when I come back, I'll either have had another bright idea (like NOT listening
> to you lot without building my backup FIRST, or thought of some other way to
> make a SETUID shell) - or HOPEFULLY, someone can post a quick fix for me
> too...
> 
> 
> tia and good night....  grrrr..
> 
> 
> Greg

+--                                         --+
       Tomás García Ferrari
       Bigital
       http://bigital.com/
+--                                         --+