Give su permission to LDAP group

I created an LDAP environment and i’m trying to set up a group in the LDAP server that has SU priviledges in all other linux machine that use this ldap server. dn: cn=superfriends,ou=group,dc=example,dc=com objectClass: posixGroup cn: GNAME gidNumber: GIDNum i add this using the ldapadd command. what’s the attribute i should add to this? Or … Read more

How can I get su screen PID on Debian8?

I want to run this command by another user (so with su): screen -ALmdS server_mta ./mta-server -n It’s okay: su – server_2 -c ‘screen -ALmdS server_mta ./mta-server -n But I need the PID of screen, but when i try to get, I got anoter PIDs. I tried this method: su – server_2 -c “screen -ALmdS … Read more

RHEL7 – su – command error logging location

I am trying to understand if there is any logging happening for this command in any log file: $ su – user1 su: user user1 does not exist I checked /var/log/messages, /var/log/secure and /var/log/audit/audit.log, but couldn’t find any message related to the command above. Note – user1 is non-existent. If I am trying with a … Read more

Sudo not working. How to reset root password Ec2 (AWS)

I installed a SSL certificated the day before. Today I wanted to log in to the server. When I try to “sudo” it gives me the following error message: sudo: unable to stat /etc/sudoers: No such file or directory sudo: no valid sudoers sources found, quitting [enter image description here][1]sudo: unable to initialize policy plugin … Read more

Can you disable su for certain users logged in via ssh?

Basically, I’m running a Mac Mini as a server, and I’m trying to close some security holes. My server has 3 users: admin, git, and server. Each user has public key authentication enabled, while only git has password authentication enabled. However, once a user is logged in as any account, they can use su to … Read more

Switching to a “role” account, using `sudo` and `ssh` agent forwarding later on – possible?

I want to create “role” accounts for several admin tasks that don’t usually require root permissions. For example, consider a www-admin user maintaining files in /var/www. It seems to me that this is the easiest way to solve file permission issues: It would make sure that everyone assuming this role creates files with permission/ownership so … Read more

Can not su – root. su: incorrect password

I am trying to switch to root user using the su command. I am getting the following error $ su – root Password: su: incorrect password I checked the /var/log/messages and found the following: Dec 9 17:04:27 vSBC_OMM_L audispd: node=vSBC_OMM_L type=USER_AUTH msg=audit(1575929067.716:33815689): user pid=5855 uid=503 auid=0 ses=39383 subj=unconfined_u:unconfined_r:unconfined_t:s0 msg=’op=PAM:authentication acct=”root” exe=”/bin/su” hostname=? addr=? terminal=pts/0 res=failed’ … Read more

su: authentication failure (password correct, setup worked before, nothing changed)

Most of the issues I found are related to new installs, root password being disabled by default, or things falling apart after some changes. None of that applies here: in my case nothing was changed, nothing new installed; everything was working before just fine. Tried: su, su -, su root, su – root – all … Read more