Jakub,

I have two unprivileged accounts configured on this test AD domain I am using, 'test1' and 'test2'.

test1's 'unix attributes' tab in AD is set to : uid 10000, gid is 10000
test2's 'unix attributes' tab in AD is set to : uid 10001, gid is 10000

tested scenarios:

1) Login via ssh with test1 account and run 'su -' or 'su - root' and supplying the root password when prompted the commands fail with 'incorrect password'. 2) Login via ssh with test2 account and run 'su -' or 'su - root' and supplying the root password when prompted the commands fail with 'incorrect password'. 3)Login via ssh with test1 and run 'su - test2' and supply the test2 password when prompted the command fails with 'incorrect password'. 4) Login via ssh with test2 and run 'su - test1' and supply the test1 password when prompted the command fails with 'incorrect password'

I have repeated the above 4 tests using the direct console login (the RHEL66 system is a VMware VM) with the same results. OS install is a freshly kickstarted RHEL66, no updates performed, selinux disabled.


Cheers.

On 1/16/2015 2:53 AM, Jakub Hrozek wrote:
Also -- do you initially log in from another unprivileged account or from root? _______________________________________________ sssd-users mailing list [email protected] https://lists.fedorahosted.org/mailman/listinfo/sssd-users

_______________________________________________
sssd-users mailing list
[email protected]
https://lists.fedorahosted.org/mailman/listinfo/sssd-users

Reply via email to