The strace I posted yesterday was obtained by commenting out this line: auth sufficient pam_rootok.so
in /etc/pam.d/su With that line in, root can su just fine. Thanks, Nish -- Nishanth Aravamudan <[EMAIL PROTECTED]> IBM Linux Technology Center -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]