Dirk Raeder wrote:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



If that doesn't work, then I would re-emerge shadow (which provides
su) and pam.




I missed this bit the first time round, but I just tried re-emerging
shadow & pam & I'm still having the same problem. There's nothing dumb
that I might have missed is there?


Login as root and check /etc/group. Make sure the user who should su is in
group wheel.
During your last update every user lost his secondary groups (stored in
/etc/group), and su only works if you're in group wheel.



That was it! But now I'm confused... All along, id showed that I was in wheel:

uid=1000(mike) gid=100(users) groups=100(users),5(tty),10(wheel),18(audio)

In addition, I couldn't su to another normal user, though I can now. Can only wheel users change to other normal users as well?

Ok... a bit more digging... I take it id reads it's groups from the gshadow file, but that su only looks in the groups file... That seems like a bug to me-- or is there method behind the madness?



--
[email protected] mailing list



Reply via email to