<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
No worries :-D<br>
<br>
Is it worth doing a check for a rootkit? Have any other files done odd
things?<br>
<br>
Phillip Bennett wrote:
<blockquote cite="mid00e801c772e3$dbeea020$27c909c0@glas.mve.com"
type="cite">
<pre wrap="">Sorry Daniel. I saw Mark at the top and addressed that to the wrong person.
Apologies,
Phil.
-----Original Message-----
From: <a class="moz-txt-link-abbreviated" href="mailto:plug-bounces@plug.org.au">plug-bounces@plug.org.au</a> [<a class="moz-txt-link-freetext" href="mailto:plug-bounces@plug.org.au">mailto:plug-bounces@plug.org.au</a>] On Behalf
Of Daniel Pearson (Flashware Solutions)
Sent: 30 March 2007 16:24
To: <a class="moz-txt-link-abbreviated" href="mailto:plug@plug.org.au">plug@plug.org.au</a>
Subject: Re: [plug] Help with SU
Mark O'Shea wrote:
</pre>
<blockquote type="cite">
<pre wrap="">On Thu, 2007-03-29 at 14:46 +0100, Phillip Bennett wrote:
</pre>
<blockquote type="cite">
<pre wrap="">However, now I can't su to root. It gives me a 'wrong password' error.
Fortunately, I can still use 'sudo su -' to get root.
</pre>
</blockquote>
<pre wrap="">
</pre>
<blockquote type="cite">
<pre wrap="">Can anyone shed any light on why this would happen? Or at least
where to look? I've checked the PAM files and the nsswitch.conf.
There's nothing in any of the logs (messages, secure etc..) I'm
completely stumped. I thought I knew how logging in worked, but I
guess I've missed something fairly important.
</pre>
</blockquote>
<pre wrap="">Curious. There's *nothing* in the logs for the auth facility (check
where it's going in the config for your syslogd, whichever one you
use) for su? Not even for the successful ones executed under sudo?
It sounds like you can authenticate okay for everything apart from su
using local password files now that your not going through kerberos to
authenticate to ad. This does suggest pam config, maybe things are
out of order. What does the pam config for su actually say?
</pre>
</blockquote>
<pre wrap=""><!---->What about sudo passwd root ?
_______________________________________________
PLUG discussion list: <a class="moz-txt-link-abbreviated" href="mailto:plug@plug.org.au">plug@plug.org.au</a>
<a class="moz-txt-link-freetext" href="http://www.plug.org.au/mailman/listinfo/plug">http://www.plug.org.au/mailman/listinfo/plug</a>
Committee e-mail: <a class="moz-txt-link-abbreviated" href="mailto:committee@plug.linux.org.au">committee@plug.linux.org.au</a>
_______________________________________________
PLUG discussion list: <a class="moz-txt-link-abbreviated" href="mailto:plug@plug.org.au">plug@plug.org.au</a>
<a class="moz-txt-link-freetext" href="http://www.plug.org.au/mailman/listinfo/plug">http://www.plug.org.au/mailman/listinfo/plug</a>
Committee e-mail: <a class="moz-txt-link-abbreviated" href="mailto:committee@plug.linux.org.au">committee@plug.linux.org.au</a>
</pre>
</blockquote>
</body>
</html>