Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
Join us in building a kind, collaborative learning community via our updated Code of Conduct.

Questions tagged [su]

Substitute User command

0
votes
0answers
36 views

Can you disable su for certain users logged in via ssh?

Basically, I'm running a Mac Mini as a server, and I'm trying to close some security holes. My server has 3 users: admin, git, and server. Each user has public key authentication enabled, while only ...
0
votes
1answer
78 views

Sudo not working. How to reset root password Ec2 (AWS)

I installed a SSL certificated the day before. Today I wanted to log in to the server. When I try to "sudo" it gives me the following error message: sudo: unable to stat /etc/sudoers: No such file or ...
0
votes
0answers
180 views

Debian/Linux restrict su to a specific group

I want only one group in my system to be able to use su or su - . For su <username> I want to have another group. To beginn with i created the group that is allowed to su to root, named it ...
-4
votes
2answers
74 views

Restricting su access

I am using rhel7.2 in our envirement.I do not want any user on system to "su" to 2 specific users say "user3 and user4".But "user3 and user4" can "su" to any user in the system. Let me explain my ...
0
votes
0answers
638 views

su: cannot set groups: Operation not permitted

I'm trying to get root access for a user who is initially logged in from a console. I have root access from another method. User does not have a username, so sudo is not an option. Running su returns ...
0
votes
1answer
55 views

User login without passwords

We have multiple users accounts with /bin/bash shell allocated to them. An another application "su" to these accounts for controlling their service statuses and monitoring purposes. Passwords for ...
0
votes
1answer
172 views

RHEL7 - su - command error logging location

I am trying to understand if there is any logging happening for this command in any log file: $ su - user1 su: user user1 does not exist I checked /var/log/messages, /var/log/secure and /var/log/...
1
vote
1answer
1k views

How to automatically switch to home directory when switching user?

When i ssh to my ubuntu server, i get logged in to my user's home folder. But when i do su otheruser and enter the password, i get logged in as the otheruser but the home directory stays for the ...
0
votes
0answers
137 views

Crashplan init script for non root user

I just installed Crashplan 4.8.0 on Ubuntu 16.04.1 as a non root user (user crashplan). To start crashplan after a reboot I placed the following script in /etc.init.d (and a symlink from rc5.d): #!/...
2
votes
1answer
1k views

can't login as root on a remote Redhat Server

I am currently working on a remote RedHat server(RHEL version 6.7 x86_64). I can login as a user by using userID and password which is provided by the server administrator. But when I try to login as ...
-1
votes
1answer
232 views

Allow winscp access, restrict direct shell access, allow su - for Linux server local user

Is it possible to restrict access for a particular local user in Linux, with below mentioned conditions: User should have no direct shell access User should be able to login with command "su -" from ...
0
votes
1answer
46 views

How can I get su screen PID on Debian8?

I want to run this command by another user (so with su): screen -ALmdS server_mta ./mta-server -n It's okay: su - server_2 -c 'screen -ALmdS server_mta ./mta-server -n But I need the PID of screen, ...
0
votes
1answer
102 views

Why Apache can run a command and root cannot?

I have a server-side script executed by Apache running as www-data. The script runs fine on the server when called remotely (http://example.com/script.sh). I am trying to run the same script on the ...
1
vote
2answers
658 views

Allow www-data to use another user - sudo or ssh

I would like to allow my PHP script (hosted with apache2) to execute commands with another user account. I don't want another website hosted on the server to be able to connect to that another user ...
0
votes
0answers
470 views

Can't use su as root: “bash: test1: No such file or directory”

I use zsh as my default user shell on my CentOS 6.5 server. Recently I have noticed, that the root can't use su anymore. Everytime I try to change the user from root to, for instance, test1 or any ...
2
votes
0answers
53 views

How do I make su wait before retries in freebsd?

I want to make attempts at using the su command timeout for 1 second between tries. Alas, the Google and StackExchange, and rtfm have not yielded results.
0
votes
1answer
206 views

Restricting su command in a specific manner

I have a list of system users who have access to almost everything via sudo. Now I would like to restrict their sudo access for command su. I would like to restrict su command for every user on ...
2
votes
2answers
554 views

Linux: Allow user to execute specific command on behalf of any other user

I am trying to find a way to allow user john to execute a command (say echo) on behalf of another user peter without being prompted for password. I found a thread that I thought would be the answer ...
-2
votes
1answer
386 views

Is it possible to “sudo su” using ssh in bash? [duplicate]

#!/bin/bash USERNAME=ksmith HOSTS="linux1" YUPDATE="sudo yum -y update" FIXDATE="sudo -u echo -e 'ZONE="America/New_York"\nUTC=true' > /etc/sysconfig/clock" for HOSTNAME in ${HOSTS} ; do ssh -tt -...
0
votes
2answers
166 views

Restrict su command

I have user1 and user2. Normally, the user root can switch on all users with su command. I want to restrict su command so that the user root can switch only to user1. It is possible??
1
vote
0answers
434 views

Automatically change remote user with sshfs

I have two remote servers, foo and bar. On both servers I have a user git (with different uid and gid). Both servers are running Debian distributions. Both servers have their each others' root ssh ...
0
votes
1answer
864 views

SSH tunnel to MySQL running on FreeBSD (Heidi SQL)

I'm trying to use a SSH tunnel to access a MySQL-server running on a FreeBSD 10.1 server. These attempts are done with Heidi SQL (http://www.heidisql.com/). The SSH daemon on the FreeBSD server does ...
-3
votes
1answer
6k views

can't switch to root or use sudo [closed]

I've just come into the following problem: For some reason I can't use su or sudo: usr@usr-MS-7816:~$ su Password: su: Authentication failure usr@usr-MS-7816:~$ sudo su [sudo] password for usr: ...
5
votes
3answers
2k views

SSH: su root or sudo? [duplicate]

What is the better option: Using su to switch to root or enabeling sudo? Without the use of sudo an intruder would need to know the password (or key) of a user allowed to ssh and then also the root ...
7
votes
1answer
16k views

su: /bin/bash: Resource temporarily unavailable

Unable to switch user to postgres. Ulimit settings for postgres user is set with reasonable limits. We are not hitting max. No errors in /var/log/messages. Error: BETA -bash-4.2# sudo su - ...
1
vote
2answers
3k views

Linux-SSSD: always getting incorrect password when su'ing to domain users, but why?

I've built a new Linux environment at my work place. I've configured sssd and bound it to one of the Active Directory domains of the company. I can tell that the sssd is partially working, let me ...
9
votes
4answers
12k views

Kernel Tuning with Privileged Docker Container

I'm building a container to tune kernel settings for a load balancer. I'd prefer to deploy those changes to the host in an image using a single privileged container. For example: docker run --rm --...
2
votes
1answer
411 views

Limit su attempts

Is there a way to limit the number of su attempts from a user? For example, malicious user gets into a user login that has su access. Repeatedly runs su to try to gain superuser access. This ...
1
vote
1answer
2k views

switch to a different user

I'm trying to SSH into a server then switch to a user named "jenkins". As you can see from the commands below, after I run su - jenkins I am still in the root user's home dir, and whoami indicates ...
0
votes
2answers
1k views

Linux: How to allow a regular user to “su - anotherUser”?

I wrote a Nagios check script which checks if user peeradmin is able to touch a file in some mount on the server. Nagios user is: nagios . I've edited /etc/sudoers and added these lines but none ...
1
vote
1answer
1k views

I am able to login to my server using WHM but when I SSH to a wheel group account I am unable to su to root [closed]

I have been having a problem over the last week or so executing an su - from a wheel group user account. I can log into WHM with the root password, but when I su - I get: [xxxxx@server public_html]$ ...
0
votes
1answer
100 views

Give su permission to LDAP group

I created an LDAP environment and i'm trying to set up a group in the LDAP server that has SU priviledges in all other linux machine that use this ldap server. dn: cn=superfriends,ou=group,dc=example,...
1
vote
1answer
2k views

su: Authentication failure

I have Ubuntu 14.04 server on which I can't use anything that relies on su. This manifests in inability to restart services or even switch users. root@ci-web1:~# su - mxx su: Authentication failure ...
0
votes
1answer
1k views

Centos : su: incorrect password after bash update

A few days ago I've updated the bash to patch it agains Shellshock and since then I cannot su - root from my regular 'wheelgroupuser' account on Centos 6.5 with WHM. I'm constantly getting su: ...
13
votes
3answers
15k views

Is “sudo su -” considered a bad practice?

Background I know the difference between su -, sudo su -, and sudo <command>: su - - switches user to root, requires the root password sudo su - - switches user to root, requires only the ...
1
vote
0answers
475 views

RHEL Equivalent of AIX's chuser login=false rlogin=false

On AIX, I can disable login/remote login by setting the attributes listed to false, but I will still be able to su from other users, and sudo as the user. Is there an equivilant in RHEL to the ...
20
votes
1answer
56k views

What's the difference between sudo su - postgres and sudo -u postgres?

PostgreSQL users peer authentication on unix sockets by default, where the unix user must be the same as the PostgreSQL user. So people frequently use su or sudo to become the postgres superuser. I ...
0
votes
1answer
320 views

Difference between su root and su -

What is the difference between switch users in linux with: su root and su -
3
votes
3answers
4k views

What is the difference between “su --command” and “su --session-command”?

Running # su - oliver --command bash gives a shell but also prints the warning bash: no job control in this shell, and indeed Ctrl+Z and fg/bg don't work in that shell. Running # su - oliver --...
1
vote
1answer
440 views

Reverse a command and disable su on Ubuntu

Whilst following an online guide on how to secure Ubuntu server, I ran this command on one of my test VM's. sudo dpkg-statoverride --update --add root admin 4750 /bin/su I know the intention of the ...
3
votes
2answers
10k views

why does sudo su; su tomcat doesn't switch to tomcat user?

In Redhat linux. from my user if I issue command sudo su -> changes to root su tomcat --> changes to tomcat user Why does tailing the commands in single line doesn't work? sudo su; su tomcat --> stil ...
1
vote
5answers
6k views

How to run su from PHP launched on Apache? [closed]

I tried to run su command with PHP shell_exec function. At first I tried: <?php echo(shell_exec('echo \'password\' | su user -c \'whoami\' 2>&1;')); ?> and I got: su: must be run from ...
0
votes
1answer
533 views

Why can a local root turn into any LDAP user?

I know this has been asked here before, but I am not satisfied with the answers and don't know if it's ok to revive and hijack an older question. We have workstations that authenticate users on an ...
0
votes
1answer
257 views

sudo su in screen — security issue?

Just logged back into a server and reconnected to an existing screen using screen -R. I had completely forgotten that I'd used sudo su - earlier and had not exited afterwards, so when I reconnected ...
0
votes
2answers
1k views

running a remote shell script that switches to a user does not return to the issuing local server shell

When I run a script such as this: ssh -t root@10.10.10.10 '/tmp/somescript.sh' where the script is defined as: #!/bin/sh mkdir -p /data/workday/cred chown -R myuser:myuser /data su myuser - # <-...
1
vote
1answer
809 views

What are the most optimal permissions for /bin/su?

I want users to be able to use "sudo su -", but not to switch user by password. What are the most optimal permissions for /bin/su? Right now it's: -rwsr-xr-x. 1 root root 42436 Jul 26 18:19 /bin/su ...
0
votes
1answer
2k views

sh bash script ambiguous redirect pid of file using single quotes

I have the following new line in my .sh file su --session-command='$javaCommandLine & >>$serviceLogFile 2>&1 & echo \$! >$pidFile' $serviceUser || return 1 When I had it with ...
-1
votes
1answer
2k views

sudo to other user doesn't preserve DISPLAY variable

I've got an /etc/sudoers file that works just fine in all versions of Fedora prior to F18, but we've noticed that when upgrading to F18 (and installing FreeIPA, though the cases I'll show here were ...
6
votes
1answer
11k views

su: must be run from a terminal [duplicate]

I have tried to set up a scheduled backup of my Minecraft server. I used a script I found on GitHub at frdmn/minebackup.sh and it seems to work great when I run it from the terminal directly. The ...
0
votes
1answer
250 views

Proper way to switch users in sudoers

What is the difference between these 2 options in /etc/sudoers: user1 mymachine = (user2) ALL user1 mymachine = /bin/su - user2 For option 1, I would do the following as user1: sudo -u user2 -i ...