From owner-freebsd-questions  Wed Oct  8 02:42:25 1997
Return-Path: <owner-freebsd-questions>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.7/8.8.7) id CAA07371
          for questions-outgoing; Wed, 8 Oct 1997 02:42:25 -0700 (PDT)
          (envelope-from owner-freebsd-questions)
Received: from d2si.com (macbeth.d2si.com [206.8.31.2])
          by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id CAA07362
          for <freebsd-questions@FreeBSD.ORG>; Wed, 8 Oct 1997 02:42:09 -0700 (PDT)
          (envelope-from alec@d2si.com)
Received: (from alec@localhost)
	by d2si.com (8.8.5/8.8.5) id EAA08374;
	Wed, 8 Oct 1997 04:41:02 -0500 (CDT)
From: Alec Kloss <alec@d2si.com>
Message-Id: <199710080941.EAA08374@d2si.com>
Subject: Re: su problem
In-Reply-To: <Pine.SGI.3.96.971007093117.14662A-100000@attila.stevens-tech.edu> from Wei Weng at "Oct 7, 97 09:32:23 am"
To: wweng@stevens-tech.edu (Wei Weng)
Date: Wed, 8 Oct 1997 04:41:02 -0500 (CDT)
Cc: freebsd-questions@FreeBSD.ORG
X-Mailer: ELM [version 2.4ME+ PL31 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-questions@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

Wei Weng said:

> Hi.
> It seems like I can't use su command. When I am a normal user, if I use su
> command, it gives me error:
> 
> su: kerberos: not in root's ACL.
> su: you are not in the correct group to su root
> 
> how can I fix that?
> 
> thanks in advance
> 
> ja ne
> 

Add yourself explicitly to the group wheel in /etc/group like this:

        wheel:*:0:your_user_id_here

You'll probably want to edit /root/.klogin to get rid of the message
from kerberos.  It should read something like:

        your_user_id_here.root@KERBEROS-REALM-HERE

Typically a Kerberos realm is just your DNS domain.