On Sun, 15 Dec 2002, David Malone wrote: > On Sun, Dec 15, 2002 at 08:00:55PM +0000, Gavin Atkinson wrote: > > Confirmed. in su.c it seems that pam_authenticate is returning > > PAM_AUTH_ERR, when it presumably should not be doing so. > > Try getting rid of the auth_as_self in /etc/pam.d/su for the > pam_wheel module.
This fixes it. Although I don't understand why this wasn't needed until recently. Is there any reason to have the default pam su config contain auth_as_self? It just seems to introduce yet another (and quite annoying) incompatibility between 4.x and 5.x without achieving anything obvious. Maybe we could get auth_as_self removed from pam_wheel in /etc/pam.d/su? Gavin To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-current" in the body of the message