Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 19 May 2003 14:40:49 -0400 (EDT)
From:      Robert Watson <rwatson@freebsd.org>
To:        Frank Bonnet <bonnetf@bart.esiee.fr>
Cc:        freebsd-current@freebsd.org
Subject:   Re: "su" bug
Message-ID:  <Pine.NEB.3.96L.1030519144004.59393I-100000@fledge.watson.org>
In-Reply-To: <20030519110242.A21561@bart.esiee.fr>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 19 May 2003, Frank Bonnet wrote:

> I notice at 5.1-BETA-20030507-JPSNAP I am able to "su -" anyone ( even
> root )  without typing any passwd from a normal user account. 
> 
> The machine use nss_ldap if it makes a difference. 

Sounds bad.

Are you running with any customizations to your PAM configuration; if so,
could you post the diffs against /usr/src/etc/pam.d, as well as your
nsswitch.conf file?

Robert N M Watson             FreeBSD Core Team, TrustedBSD Projects
robert@fledge.watson.org      Network Associates Laboratories




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.NEB.3.96L.1030519144004.59393I-100000>