On Sun, 15 Dec 2002, David Malone wrote:

> On Sun, Dec 15, 2002 at 08:00:55PM +0000, Gavin Atkinson wrote:
> > Confirmed. in su.c it seems that pam_authenticate is returning
> > PAM_AUTH_ERR, when it presumably should not be doing so.
>
> Try getting rid of the auth_as_self in /etc/pam.d/su for the
> pam_wheel module.

This fixes it. Although I don't understand why this wasn't needed until
recently.

Is there any reason to have the default pam su config contain
auth_as_self? It just seems to introduce yet another (and quite annoying)
incompatibility between 4.x and 5.x without achieving anything obvious.

Maybe we could get auth_as_self removed from pam_wheel in /etc/pam.d/su?

Gavin

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message

Reply via email to