From owner-freebsd-questions@FreeBSD.ORG Wed Feb 13 18:51:34 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id E950216A41B for ; Wed, 13 Feb 2008 18:51:34 +0000 (UTC) (envelope-from neil@gruending.net) Received: from py-out-1112.google.com (py-out-1112.google.com [64.233.166.177]) by mx1.freebsd.org (Postfix) with ESMTP id B3A7A13C448 for ; Wed, 13 Feb 2008 18:51:34 +0000 (UTC) (envelope-from neil@gruending.net) Received: by py-out-1112.google.com with SMTP id u52so126344pyb.10 for ; Wed, 13 Feb 2008 10:51:33 -0800 (PST) Received: by 10.141.83.15 with SMTP id k15mr201213rvl.120.1202928692907; Wed, 13 Feb 2008 10:51:32 -0800 (PST) Received: by 10.141.190.3 with HTTP; Wed, 13 Feb 2008 10:51:32 -0800 (PST) Message-ID: Date: Wed, 13 Feb 2008 10:51:32 -0800 From: "Neil Gruending" To: "Derek Ragona" In-Reply-To: <6.0.0.22.2.20080212190133.024c3008@mail.computinginnovations.com> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <6.0.0.22.2.20080212190133.024c3008@mail.computinginnovations.com> Cc: freebsd-questions@freebsd.org Subject: Re: Help with su on 6.3 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Feb 2008 18:51:35 -0000 On 2/12/08, Derek Ragona wrote: > > At 06:16 PM 2/12/2008, Neil Gruending wrote: > > Hi, > > Today I upgraded my computer to 6.3, but now root can't su to other > users. I login as a regular user (neil) over ssh and I can su to > become root. But now root can't su to other users. For example, if I > do "su svn" I get "su: Sorry". My boot rc scripts do the same thing > where I use su. Everything worked fine when I was running 6.2. Any > help is appreciated. I followed the binary upgrade procedure in the > release announcement. > > Thanks > Neil > Did you run mergemaster? Check your users still exist in /etc/passwd? > > -Derek > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. I didn't run mergemaster because http://www.freebsd.org/releases/6.3R/announce.html didn't say to. However, I did try su at the console with the same result, but I was getting pam_acct_mgmt: authentication errors. I checked /etc/master.passwd and noticed that the accounts I was trying to su to were locked. I tried "passwd account" as root on an account that wasn't working and once I set a password it I could su to it as long as logins were enabled. I tried another account with disabled logins and got "This account is currently not available". Both of these accounts only exist to let servers run as different users. What's the proper way to set them up? Maybe that's my issue instead. I only noticed this because the servers weren't starting because the init scripts can't su to the right users anymore. Thanks, Neil