From owner-freebsd-security  Sun Sep  2  1:13:25 2001
Delivered-To: freebsd-security@freebsd.org
Received: from arb.arb.za.net (arb.arb.za.net [196.7.148.4])
	by hub.freebsd.org (Postfix) with ESMTP id 7DA2937B405
	for <security@FreeBSD.ORG>; Sun,  2 Sep 2001 01:13:19 -0700 (PDT)
Received: (from uucp@localhost)
	by arb.arb.za.net (8.11.3/8.11.3) with UUCP id f828CuT43781;
	Sun, 2 Sep 2001 10:12:56 +0200 (SAST)
	(envelope-from mark@grondar.za)
Received: from grondar.za (localhost [127.0.0.1])
	by grimreaper.grondar.za (8.11.6/8.11.4) with ESMTP id f81JkcH11332;
	Sat, 1 Sep 2001 20:46:38 +0100 (BST)
	(envelope-from mark@grondar.za)
Message-Id: <200109011946.f81JkcH11332@grimreaper.grondar.za>
To: "Glen Hollings" <GHollings@admin.gil.com.au>
Cc: security@FreeBSD.ORG
Subject: Re: Broken SU 
References: <B9C04FEB4B4EA74696488AE05045588728D27B@postal.admin.gil.com.au> 
In-Reply-To: <B9C04FEB4B4EA74696488AE05045588728D27B@postal.admin.gil.com.au> ; from "Glen Hollings" <GHollings@admin.gil.com.au>  "Fri, 31 Aug 2001 15:06:30 +1000."
Date: Sat, 01 Sep 2001 20:46:37 +0100
From: Mark Murray <mark@grondar.za>
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

> anyone have any ideas?? please!

Please turn PAM debugging on for all su(1)/PAM modules, and log all
LOG_DEBUG messages to some file. Please send me the relevant extracts
of this logging.

Please also let me know what your OS version and PAM-relevant setups
in (/etc/pam.conf) are.

M
-- 
Mark Murray
Warning: this .sig is umop ap!sdn

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message