strange su behavior
 

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

I have a strange su hehavior on a CentOS 5.4 32Bit installation in a
VMware ESXi virtualizied environment:

If I am root and want to change the user to a non-root user, the system
prompts me for a password:


[root@halifax ~]# useradd test00
[root@halifax ~]# su - test00


We trust you have received the usual lecture from the local System
Administrator. It usually boils down to these three things:

#1) Respect the privacy of others.
#2) Think before you type.
#3) With great power comes great responsibility.

Password:

[test00@halifax ~]$ logout
[root@halifax ~]# su - test00
[test00@halifax ~]$ logout
[root@halifax ~]#


At this test procedure I just hit the enter key at the password promt.


Do you have any idea for this behavoir? I expect to do so from root to
any account _without_ being prompted for the password.

Thanks,
Uwe
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJLlVsjAAoJENs3frmum9swFTwH/1ulj7ZRETV/fAt/0NztXsn5
NJ7szhb+CPDxQCM49RdN6c8OUcZReVZsP1sTPCTiu6kvuNPm7v PhminuecIOEXA/
GUZC/6nS9YcHlFUbmO7nxpP2bbJHrrO2r9s4JdWftHP0YQUADNad9AN/jAQHd032
0xfp/vtAkj2PfIBt/J6h3taVwxx3Epb4gY2wuWYLRcJyDuzJLLD25OJVAOxuUaik
RkNcpfiZM3Japq6Mb3kUGlYkdLf4+xxPCC/pwdVVC2fzSUVK9asmqq0pbu6KQfTc
Lv5WwS6ENmY6eBbO5IcpILtC+LwBayjU50RWByaFl4uMcfQd9F 9uVAdmnLW8/8c=
=TNjq
-----END PGP SIGNATURE-----
_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

strange su behavior
 

Uwe Kiewel wrote:
> [root@halifax ~]# useradd test00
> [root@halifax ~]# su - test00
>
>
> We trust you have received the usual lecture from the local System
> Administrator. It usually boils down to these three things:
>
> #1) Respect the privacy of others.
> #2) Think before you type.
> #3) With great power comes great responsibility.
>
> Password:
> ...

that almost sounds like sudo, not su. is it aliased or something?


_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

strange su behavior
 

>
>
> Hi,
>
> I have a strange su hehavior on a CentOS 5.4 32Bit installation in a
> VMware ESXi virtualizied environment:
>
> If I am root and want to change the user to a non-root user, the system
> prompts me for a password:
>
>
> [root@halifax ~]# useradd test00
> [root@halifax ~]# su - test00
>
>
> We trust you have received the usual lecture from the local System
> Administrator. It usually boils down to these three things:
>
> #1) Respect the privacy of others.
> #2) Think before you type.
> #3) With great power comes great responsibility.
>
> Password:

The above warning comes from sudo. Figure out why you're running sudo and not su as you expect. Is it aliased?

--
Don Krause
"This message represents the official view of the voices in my head."






_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

strange su behavior
 

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Am 08.03.2010 21:21, schrieb John R Pierce:
> Uwe Kiewel wrote:
>> [root@halifax ~]# useradd test00
>> [root@halifax ~]# su - test00
>>
>>
>> We trust you have received the usual lecture from the local System
>> Administrator. It usually boils down to these three things:
>>
>> #1) Respect the privacy of others.
>> #2) Think before you type.
>> #3) With great power comes great responsibility.
>>
>> Password:
>> ...
>
> that almost sounds like sudo, not su. is it aliased or something?
>

I don't think so:

[root@halifax ~]# type su
su is hashed (/bin/su)

[root@halifax ~]# file /bin/su
/bin/su: setuid ELF 32-bit LSB shared object, Intel 80386, version 1
(SYSV), for GNU/Linux 2.6.9, stripped

[root@halifax ~]# type sudo
sudo is /usr/bin/sudo

[root@halifax ~]# file /usr/bin/sudo
/usr/bin/sudo: setuid ELF 32-bit LSB shared object, Intel 80386, version
1 (SYSV), for GNU/Linux 2.6.9, stripped

[root@halifax ~]# sum /bin/su
22494 24

[root@halifax ~]# sum /usr/bin/sudo
63311 138


Thanks,
Uwe
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJLlV38AAoJENs3frmum9swTsgH/1NXTua12hvnHt1js0Mzc1wI
RViyiATgPTCYUEKtfR7vUw6oWymbu+Psb8QWjH/x++FkBogjRBGrYjMHP2bhrcBx
c8PP4WMWkTpuX05Tb+ox7oB2r8qzuSudx9np9Gx/b1RJJI7y9SG3eiPRINyFreEG
1ywjyvRfvOZPo3398RqXLb6zqEqrK7ghyNp0oo0p7NS4mfn9ip wPMlAzL0oYjmNY
+W5dv/Gce/KCHp94piDens312WTTqF+NCpNOSVtz9r6sjHJwGkcDhS86p+p+ b+TO
Fls5KkgPrh2LldNfrvxLgP+D3XVAMBz60ZKWQ2tk7zaLCqd9nW Cvn8v1dhAqWS4=
=PjGv
-----END PGP SIGNATURE-----
_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

strange su behavior
 

> -----Original Message-----
> From: centos-bounces@centos.org [mailto:centos-bounces@centos.org] On
> Behalf Of Uwe Kiewel
> Sent: Monday, March 08, 2010 2:17 PM
> To: centos@centos.org
> Subject: [CentOS] strange su behavior
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hi,
>
> I have a strange su hehavior on a CentOS 5.4 32Bit installation in a
> VMware ESXi virtualizied environment:
>
> If I am root and want to change the user to a non-root user, the system
> prompts me for a password:
>
>
> [root@halifax ~]# useradd test00
> [root@halifax ~]# su - test00
>
>
> We trust you have received the usual lecture from the local System
> Administrator. It usually boils down to these three things:
>
> #1) Respect the privacy of others.
> #2) Think before you type.
> #3) With great power comes great responsibility.
>
> Password:
>
> [test00@halifax ~]$ logout
> [root@halifax ~]# su - test00
> [test00@halifax ~]$ logout
> [root@halifax ~]#
>
>
> At this test procedure I just hit the enter key at the password promt.
>
>
> Do you have any idea for this behavoir? I expect to do so from root to
> any account _without_ being prompted for the password.
>
> Thanks,
> Uwe
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.10 (MingW32)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
>
> iQEcBAEBAgAGBQJLlVsjAAoJENs3frmum9swFTwH/1ulj7ZRETV/fAt/0NztXsn5
> NJ7szhb+CPDxQCM49RdN6c8OUcZReVZsP1sTPCTiu6kvuNPm7v PhminuecIOEXA/
> GUZC/6nS9YcHlFUbmO7nxpP2bbJHrrO2r9s4JdWftHP0YQUADNad9AN/jAQHd032
> 0xfp/vtAkj2PfIBt/J6h3taVwxx3Epb4gY2wuWYLRcJyDuzJLLD25OJVAOxuUaik
> RkNcpfiZM3Japq6Mb3kUGlYkdLf4+xxPCC/pwdVVC2fzSUVK9asmqq0pbu6KQfTc
> Lv5WwS6ENmY6eBbO5IcpILtC+LwBayjU50RWByaFl4uMcfQd9F 9uVAdmnLW8/8c=
> =TNjq
> -----END PGP SIGNATURE-----
> _______________________________________________
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos

Have you tried just running su without the dash and space before the username? (For example: su test00). If not try that and let us know if you receive the same result.

Regards,

Dan
_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

strange su behavior
 

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Am 08.03.2010 22:03, schrieb Dan Burkland:

>> [root@halifax ~]# useradd test00
>> [root@halifax ~]# su - test00
>>
>>
>> We trust you have received the usual lecture from the local System
>> Administrator. It usually boils down to these three things:
>>
>> #1) Respect the privacy of others.
>> #2) Think before you type.
>> #3) With great power comes great responsibility.
>>
>> Password:
>>
>> [test00@halifax ~]$ logout
>> [root@halifax ~]# su - test00
>> [test00@halifax ~]$ logout
>> [root@halifax ~]#
>>
>>
>> At this test procedure I just hit the enter key at the password promt.
>>
>>
>> Do you have any idea for this behavoir? I expect to do so from root to
>> any account _without_ being prompted for the password.
>>

> Have you tried just running su without the dash and space before the username? (For example: su test00). If not try that and let us know if you receive the same result.

Same result:

[root@halifax ~]# su test00

Password:

[test00@halifax root]$ exit
[root@halifax ~]#

- --
Thanks,
Uwe
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJLlWjxAAoJENs3frmum9swV70H/1yUOrDx4CYrk3zz7KQqTqe9
OQdYKyAfpOiS+aNTrdX1u3/GNwF5E36M2Wjrnfp+2ZjAvVgHR0UazXBkMpsgLM2r
SJwDw+dNAdaPcdKCAOmgN1Bf5gHxdeD3b5KReQ2h6kJWwoMXNA Vv+lut5B88tm3/
8S/bQAPfAmsojzR8aVX6Lr5kmf7EoHEBDwt6Rx3dPi37tghf1GC1b jU9ES3zo2t5
WJbvsZddplRocH9kB/TUeUmuSclP7RBNd2iyjL2SS7wabX6rjy6x+AmvBCc3+hsn
HrjYe5CmUwRaCAKVw76Z13cyZEfL+A50m3SfrcHtnDcNRriQnl J3hugVTIYKHEQ=
=5kjJ
-----END PGP SIGNATURE-----
_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

strange su behavior
 

On Mon, 8 Mar 2010 21:28:44 +0100
Uwe Kiewel <ml@kiewel-online.ch> wrote:

> > that almost sounds like sudo, not su. is it aliased or something?
> I don't think so:
> [root@halifax ~]# file /bin/su

You've confirmed it's not symlinked, but is it aliased?

Type "alias" and see the result.

--
Spiro Harvey Knossos Networks Ltd
021-295-1923 www.knossos.net.nz
_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

strange su behavior
 

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Am 09.03.2010 02:16, schrieb Spiro Harvey:
> On Mon, 8 Mar 2010 21:28:44 +0100
> Uwe Kiewel <ml@kiewel-online.ch> wrote:
>
>>> that almost sounds like sudo, not su. is it aliased or something?
>> I don't think so:
>> [root@halifax ~]# file /bin/su
>
> You've confirmed it's not symlinked, but is it aliased?
>
> Type "alias" and see the result.
>

[root@halifax ~]# alias
alias cp='cp -i'
alias l.='ls -d .* --color=tty'
alias ll='ls -l --color=tty'
alias ls='ls --color=tty'
alias mv='mv -i'
alias rm='rm -i'
alias which='alias | /usr/bin/which --tty-only --read-alias --show-dot
- --show-tilde'


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJLlfOPAAoJENs3frmum9swD+sH/R9gC2+w0XdBb+bQfVhAhMEV
jd4LENnH1FXCC5oU3ypUdtk9VvtdZAfC1HUBQk2jC80Y3aZRP2 O5D7fwiHP1ddPd
WC2K9yNG1M/7/hAD/fdNSQYRaMbkw/5v5G4827gflUR7OT6JBo6BoHUnkKwh6jOR
8vIJppPQ2a7HBWpmYeH1NO2+YgH/yNvxfZqTT7946ZoO+GvDoCvNkXgUAyOrFjrf
1CaYOOXOtqABe+HBaqccv/IriMM7eRWQt8rPil3ukJt1kR5MNPukggE9xjhJEv7v
TLf1iyd1npqrpNLCc8nvNbYr7cUOeQ1HAbJy02lcUobnYUirtk E5wETHW8YFiVY=
=Noc7
-----END PGP SIGNATURE-----
_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

strange su behavior
 

From: Uwe Kiewel <ml@kiewel-online.ch>
> If I am root and want to change the user to a non-root user, the system
> prompts me for a password:
> [root@halifax ~]# useradd test00
> [root@halifax ~]# su - test00
> We trust you have received the usual lecture from the local System
> Administrator. It usually boils down to these three things:
> #1) Respect the privacy of others.
> #2) Think before you type.
> #3) With great power comes great responsibility.
> Password:
> [test00@halifax ~]$ logout
> [root@halifax ~]# su - test00
> [test00@halifax ~]$ logout
> [root@halifax ~]#
> At this test procedure I just hit the enter key at the password promt.
> Do you have any idea for this behavoir? I expect to do so from root to
> any account _without_ being prompted for the password.

Do you have any sudo call from your /etc or /etc/skel bashrc or profile...?

JD



_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

strange su behavior
 

From: Uwe Kiewel <ml@kiewel-online.ch>
>> If I am root and want to change the user to a non-root user, the system
>> prompts me for a password:
>> [root@halifax ~]# useradd test00
>> [root@halifax ~]# su - test00
>> We trust you have received the usual lecture from the local System
>> Administrator. It usually boils down to these three things:
>> #1) Respect the privacy of others.
>> #2) Think before you type.
>> #3) With great power comes great responsibility.
>> Password:
>> [test00@halifax ~]$ logout
>> [root@halifax ~]# su - test00
>> [test00@halifax ~]$ logout
>> [root@halifax ~]#
>> At this test procedure I just hit the enter key at the password promt.
>> Do you have any idea for this behavoir? I expect to do so from root to
>> any account _without_ being prompted for the password.
>
>Do you have any sudo call from your /etc or /etc/skel bashrc or profile...?

Yes, I do have in /etc/bashrc:

[...]
if [ $UID -ne 0 ]; then
echo
sudo -l
echo
fi


Thanks,
Uwe
_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos