Re: Help with su on 6.3
At 08:16 AM 2/14/2008, Alex Zbyslaw wrote: Derek Ragona wrote: I usually just set the shell to /usr/bin/false or /usr/sbin/nologin for users like these. Of course you can't test these interactively with su. If you want to do that, give the account a valid login shell, test it, then set it to false or nologin. It's not clear to me what you mean by "you can't test these interactively with su". If you mean you can't su to them and get a shell; that's wrong. su -m account_with_fake_shell --Alex Alex, What I meant to say was that you can: su -m account_with_fake_shell But you can't: su - account_with_fake_shell and then test any command and scripts in the user's environment. -Derek -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Help with su on 6.3
Derek Ragona wrote: I usually just set the shell to /usr/bin/false or /usr/sbin/nologin for users like these. Of course you can't test these interactively with su. If you want to do that, give the account a valid login shell, test it, then set it to false or nologin. It's not clear to me what you mean by "you can't test these interactively with su". If you mean you can't su to them and get a shell; that's wrong. su -m account_with_fake_shell --Alex ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Help with su on 6.3
At 12:51 PM 2/13/2008, Neil Gruending wrote: On 2/12/08, Derek Ragona <[EMAIL PROTECTED]> wrote: > > At 06:16 PM 2/12/2008, Neil Gruending wrote: > > Hi, > > Today I upgraded my computer to 6.3, but now root can't su to other > users. I login as a regular user (neil) over ssh and I can su to > become root. But now root can't su to other users. For example, if I > do "su svn" I get "su: Sorry". My boot rc scripts do the same thing > where I use su. Everything worked fine when I was running 6.2. Any > help is appreciated. I followed the binary upgrade procedure in the > release announcement. > > Thanks > Neil > Did you run mergemaster? Check your users still exist in /etc/passwd? > > -Derek > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. I didn't run mergemaster because http://www.freebsd.org/releases/6.3R/announce.html didn't say to. However, I did try su at the console with the same result, but I was getting pam_acct_mgmt: authentication errors. I checked /etc/master.passwd and noticed that the accounts I was trying to su to were locked. I tried "passwd account" as root on an account that wasn't working and once I set a password it I could su to it as long as logins were enabled. I tried another account with disabled logins and got "This account is currently not available". Both of these accounts only exist to let servers run as different users. What's the proper way to set them up? Maybe that's my issue instead. I only noticed this because the servers weren't starting because the init scripts can't su to the right users anymore. Thanks, Neil Well you should always read and follow UPDATING in /usr/src when doing an upgrade. I usually just set the shell to /usr/bin/false or /usr/sbin/nologin for users like these. Of course you can't test these interactively with su. If you want to do that, give the account a valid login shell, test it, then set it to false or nologin. -Derek -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Help with su on 6.3
On 2/12/08, Derek Ragona <[EMAIL PROTECTED]> wrote: > > At 06:16 PM 2/12/2008, Neil Gruending wrote: > > Hi, > > Today I upgraded my computer to 6.3, but now root can't su to other > users. I login as a regular user (neil) over ssh and I can su to > become root. But now root can't su to other users. For example, if I > do "su svn" I get "su: Sorry". My boot rc scripts do the same thing > where I use su. Everything worked fine when I was running 6.2. Any > help is appreciated. I followed the binary upgrade procedure in the > release announcement. > > Thanks > Neil > Did you run mergemaster? Check your users still exist in /etc/passwd? > > -Derek > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. I didn't run mergemaster because http://www.freebsd.org/releases/6.3R/announce.html didn't say to. However, I did try su at the console with the same result, but I was getting pam_acct_mgmt: authentication errors. I checked /etc/master.passwd and noticed that the accounts I was trying to su to were locked. I tried "passwd account" as root on an account that wasn't working and once I set a password it I could su to it as long as logins were enabled. I tried another account with disabled logins and got "This account is currently not available". Both of these accounts only exist to let servers run as different users. What's the proper way to set them up? Maybe that's my issue instead. I only noticed this because the servers weren't starting because the init scripts can't su to the right users anymore. Thanks, Neil ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Help with su on 6.3
At 06:16 PM 2/12/2008, Neil Gruending wrote: Hi, Today I upgraded my computer to 6.3, but now root can't su to other users. I login as a regular user (neil) over ssh and I can su to become root. But now root can't su to other users. For example, if I do "su svn" I get "su: Sorry". My boot rc scripts do the same thing where I use su. Everything worked fine when I was running 6.2. Any help is appreciated. I followed the binary upgrade procedure in the release announcement. Thanks Neil Did you run mergemaster? Check your users still exist in /etc/passwd? -Derek -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Help with su on 6.3
Hi, su works on my 6.3 - but without ssh - just as expected. Do you have physical access to the machine? Try it without ssh to help isolate the problem. Erich Neil Gruending wrote: Hi, Today I upgraded my computer to 6.3, but now root can't su to other users. I login as a regular user (neil) over ssh and I can su to become root. But now root can't su to other users. For example, if I do "su svn" I get "su: Sorry". My boot rc scripts do the same thing where I use su. Everything worked fine when I was running 6.2. Any help is appreciated. I followed the binary upgrade procedure in the release announcement. Thanks Neil ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]" ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"