Hi, Bob!

Thanks for going into such informative depth in your response.  Here is the
output of our sh:

# su --version
su (GNU sh-utils) 2.0.11
Written by David MacKenzie.

Copyright (C) 2000 Free Software Foundation, Inc.
This is free software; see the source for copying conditions.  There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

I checked just in case for some strange reason, we got the man page for the
GNU su but were running something else in actuality.

Now that I think about it, yeah: if su is using the presiding authentication
method on a system (such as PAM in my case), it could be that PAM required
the 'wheel' group membership.  I will read up on PAM's documentation to see
how clearly someone could make the connection that in order for PAM to allow
su-type functions, a user has to be in 'wheel'.  It didn't occur to me that
su was dependant on PAM but now that I think of it, anything authenticating
with the UNIX password files would need PAM or whatever else the OS was
using.

Thank you again.


---
Dairenn Lombard <[EMAIL PROTECTED]>
BroadSpire Systems Administration Dept.
Thursdays-Mondays: 5pm-2am
"Automation, Scalability and Security"
_______________________________________________
Bug-sh-utils mailing list
[EMAIL PROTECTED]
http://mail.gnu.org/mailman/listinfo/bug-sh-utils

Reply via email to