Re: using pam_wheel.so (fwd)

[Alex de Joode <usura replay com>]

In article <Pine SOL 3 91 981008161027 10167B-100000 einstein> you wrote:

: I am trying to set up my system only to allow certain users (members of 
: wheel group) to su to root. I tried this:
: (in /etc/pam.d/su)
: auth sufficient pam_rootok.so
: auth required pam_wheel.so
: auth required pam_unix_auth.so

: and it is not working for me.  What happens is that when any user (wheel 
: member or not) it shows that password prompt twice and then says 
: incorrect password.

: How do I do this?

on RHL 5.1 try this:
/etc/pam.d/su:
#%PAM-1.0
auth       sufficient   /lib/security/pam_rootok.so
auth       required     /lib/security/pam_pwdb.so shadow nullok
auth       required     /lib/security/pam_wheel.so
account    required     /lib/security/pam_pwdb.so
password   required     /lib/security/pam_cracklib.so
password   required     /lib/security/pam_pwdb.so shadow use_authtok nullok
session    required     /lib/security/pam_pwdb.so

-aj-
--
Alex de Joode | International CryptoRunners | http://www.replay.com
         'A little paranoia can lengthen your life'