Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 19 May 2003 12:51:36 -0700
From:      Gordon Tetlow <gordont@gnf.org>
To:        Frank Bonnet <bonnetf@bart.esiee.fr>
Cc:        freebsd-current@freebsd.org
Subject:   Re: "su" bug
Message-ID:  <20030519195136.GE1950@roark.gnf.org>
In-Reply-To: <20030519110242.A21561@bart.esiee.fr>
References:  <20030519110242.A21561@bart.esiee.fr>

next in thread | previous in thread | raw e-mail | index | archive | help

--OWym5pP/pDvoNOpg
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mon, May 19, 2003 at 11:02:42AM +0200, Frank Bonnet wrote:
>=20
> Hi
>=20
> I notice at 5.1-BETA-20030507-JPSNAP=20
> I am able to "su -" anyone ( even root )
> without typing any passwd from a normal
> user account.

It sounds like you have a pam_permit somewhere you shouldn't.

> The machine use nss_ldap if it makes a difference.

I've got nss_ldap and I don't have this problem.

-gordon

--OWym5pP/pDvoNOpg
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (FreeBSD)

iD8DBQE+yTXIRu2t9DV9ZfsRAli7AJ4tGdPFJ55adSowZ14ufJwyfbDMlQCgp9JN
h5QvZ0PGkyzaulvazOpCINc=
=96Km
-----END PGP SIGNATURE-----

--OWym5pP/pDvoNOpg--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030519195136.GE1950>