[plug] Help with SU

[Mark O'Shea]

On Thu, 2007-03-29 at 14:46 +0100, Phillip Bennett wrote:
> However, now I can't su to root.  It gives me a 'wrong password' error.
> Fortunately, I can still use 'sudo su -' to get root.

> Can anyone shed any light on why this would happen?  Or at least where to
> look?  I've checked the PAM files and the nsswitch.conf.  There's nothing in
> any of the logs (messages, secure etc..)  I'm completely stumped.  I thought
> I knew how logging in worked, but I guess I've missed something fairly
> important.
Curious.  There's *nothing* in the logs for the auth facility (check
where it's going in the config for your syslogd, whichever one you use)
for su? Not even for the successful ones executed under sudo?

It sounds like you can authenticate okay for everything apart from su
using local password files now that your not going through kerberos to
authenticate to ad.  This does suggest pam config, maybe things are out
of order.  What does the pam config for su actually say?

-- 
Mark O'Shea