"su" bug

[Gordon Tetlow]

On Mon, May 19, 2003 at 11:02:42AM +0200, Frank Bonnet wrote:
> 
> Hi
> 
> I notice at 5.1-BETA-20030507-JPSNAP 
> I am able to "su -" anyone ( even root )
> without typing any passwd from a normal
> user account.

It sounds like you have a pam_permit somewhere you shouldn't.

> The machine use nss_ldap if it makes a difference.

I've got nss_ldap and I don't have this problem.

-gordon
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-current/attachments/20030519/b3fc146c/attachment.bin