You are not logged in.

#1 2004-06-16 22:06:57

iotc247
Member
From: Florida
Registered: 2004-05-31
Posts: 177
Website

Cant su

When i have no password set for root because i did passwd -d root i cant su from a regular user... But when there is a root passwd i can su.. I dont like root passwords so how can i change this.. i could do it properly in slack..

Offline

#2 2004-06-16 23:54:10

Dusty
Schwag Merchant
From: Medicine Hat, Alberta, Canada
Registered: 2004-01-18
Posts: 5,986
Website

Re: Cant su

It is a security feature.

You would like anyone who can ssh, telnet, login, crack, or sit down at your computer to be able to su root and wipe your hard drive? 

Why bother with su at all, you could just log in as root at the outset.

You could set up sudo to log you in without a password.

Dusty

Offline

#3 2004-06-16 23:55:42

iotc247
Member
From: Florida
Registered: 2004-05-31
Posts: 177
Website

Re: Cant su

not everything works with sudo... Thats why i need su.. I dont care that much bout security... I got a router with firewall and modem with firewall its secure enough for me..

Offline

#4 2004-06-17 00:10:41

xerxes2
Member
From: Malmoe, Sweden
Registered: 2004-04-23
Posts: 1,249
Website

Re: Cant su

I'm too tired to read the posts, but why do you log in as user if you don't have a root password?  set pasword to linux or something easy if you are afraid of loosing it. wink


arch + gentoo + initng + python = enlisy

Offline

#5 2004-06-17 00:11:14

Dusty
Schwag Merchant
From: Medicine Hat, Alberta, Canada
Registered: 2004-01-18
Posts: 5,986
Website

Offline

#6 2004-06-17 00:18:32

xerxes2
Member
From: Malmoe, Sweden
Registered: 2004-04-23
Posts: 1,249
Website

Re: Cant su

googleknowtheirstuffdamnimustgetacoolpictousehereatforuminsteadofwriting


arch + gentoo + initng + python = enlisy

Offline

#7 2004-06-17 00:24:28

Dusty
Schwag Merchant
From: Medicine Hat, Alberta, Canada
Registered: 2004-01-18
Posts: 5,986
Website

Offline

#8 2004-06-17 01:19:53

Xentac
Forum Fellow
From: Victoria, BC
Registered: 2003-01-17
Posts: 1,797
Website

Re: Cant su

Compare the differences between /etc/pam.d/login and /etc/pam.d/su.

Notice the mentions about wheel, if you add yourself to the wheel group and uncomment those lines, then you won't need a password even if there is one.

One of my favourite sudo commands is 'sudo su -'.  That means you have to type in your password and not root's.  The horror!

I also warn you that not having a root password is one of the stupidest things you can do.  I mostly posted this to help people better understand pam.

Scalawag.


I have discovered that all of mans unhappiness derives from only one source, not being able to sit quietly in a room
- Blaise Pascal

Offline

#9 2004-06-17 07:25:41

apeiro
Daddy
From: Victoria, BC, Canada
Registered: 2002-08-12
Posts: 771
Website

Re: Cant su

You could either try the sudo utility, or add the "nullok" option to the auth line in /etc/pam.d/su

#%PAM-1.0
auth            sufficient      pam_rootok.so
# Uncomment the following line to implicitly trust users in the "wheel" group.
#auth           sufficient      pam_wheel.so trust use_uid
# Uncomment the following line to require a user to be in the "wheel" group.
#auth           required        pam_wheel.so use_uid
auth            required        pam_unix.so nullok
account         required        pam_unix.so
session         required        pam_unix.so

Though the wheel group is a better idea than just have a blank password for root.

Offline

#10 2004-06-17 15:06:22

iotc247
Member
From: Florida
Registered: 2004-05-31
Posts: 177
Website

Re: Cant su

Ok thx for that wheel group idea.. I used that instead of trying to get no root password thx alot..

Offline

Board footer

Powered by FluxBB