[plug] Help with SU

[Daniel Pearson (Flashware Solutions)]

Mark O'Shea wrote:
> On Thu, 2007-03-29 at 14:46 +0100, Phillip Bennett wrote:
>   
>> However, now I can't su to root.  It gives me a 'wrong password' error.
>> Fortunately, I can still use 'sudo su -' to get root.
>>     
>
>   
>> Can anyone shed any light on why this would happen?  Or at least where to
>> look?  I've checked the PAM files and the nsswitch.conf.  There's nothing in
>> any of the logs (messages, secure etc..)  I'm completely stumped.  I thought
>> I knew how logging in worked, but I guess I've missed something fairly
>> important.
>>     
> Curious.  There's *nothing* in the logs for the auth facility (check
> where it's going in the config for your syslogd, whichever one you use)
> for su? Not even for the successful ones executed under sudo?
>
> It sounds like you can authenticate okay for everything apart from su
> using local password files now that your not going through kerberos to
> authenticate to ad.  This does suggest pam config, maybe things are out
> of order.  What does the pam config for su actually say?
>
>   
What about sudo passwd root ?