Login or Register to Ask a Question and Join Our Community


Solaris

su: No shell/No directory! if sys is added to a users secondary group

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Operating Systems Solaris su: No shell/No directory! if sys is added to a users secondary group
# 1  
Old 08-09-2010
su: No shell/No directory! if sys is added to a users secondary group
Hi,
When I include a user to the secondary group "sys" GID=3 in Solaris 9 OS I'm not able to login. I get these error. The user home directory and the shell exists. Is this because of any security hardening.

Code:
# su - agent
No directory!
# su agent
su: No shell

# grep taddm /etc/passwd
agent:x:5001:5001::/home/agent:/bin/ksh

# ls -ld /home/agent
drwxr-xr-x   2 agent    agent        512 Aug  9 10:10 /home/agent

# ls -l /bin/ksh
-r-xr-xr-x   3 root     bin       201076 Aug  9  2005 /bin/ksh

Last edited by pludi; 08-09-2010 at 06:49 AM.. Reason: code tags, please...
# 2  
Old 08-09-2010
Do you use the automounter at all ?
I setup the same as you had above on a generic Sol 9 box and it worked fine.
Could you also supply an "cat /etc/shells" , "grep agent /etc/group" and "cat /etc/nsswitch.conf".
Thx
# 3  
Old 08-09-2010
Code:
# cat /etc/shells
/usr/bin/sh
/usr/bin/csh
/usr/bin/ksh
/usr/bin/jsh
/bin/sh
/bin/csh
/bin/ksh
/bin/jsh
/sbin/sh
/sbin/jsh
/sbin/noshell
/bin/bash
/bin/pfcsh
/bin/pfksh
/bin/pfsh
/bin/tcsh
/bin/zsh
/usr/bin/bash
/usr/bin/pfcsh
/usr/bin/pfksh
/usr/bin/pfsh
/usr/bin/tcsh
/usr/bin/zsh

# grep agent /etc/group
adm::4:root,adm,daemon,agent
sys::3:root,bin,sys,adm,agent
agent::5001:

#cat /etc/nsswitch.conf
passwd:     files
group:      files

I can login normally, I have this problem only when I add the user to the secondary group sys. Any idea?
Last edited by Scott; 08-09-2010 at 11:01 AM.. Reason: Please use code tags
# 4  
Old 08-09-2010
And do you use the automounter ?
# 5  
Old 08-09-2010
Hi, How could I find it? I have these configuration.

Code:
# tail /etc/auto_master
# Master map for automounter
#
+auto_master
/net            -hosts          -nosuid,nobrowse
/home           auto_home       -nobrowse
/xfn            -xfn

# more /etc/auto_home
# Home directory map for automounter
#
+auto_home

Last edited by Scott; 08-09-2010 at 11:01 AM.. Reason: Code tags, please...
# 6  
Old 08-09-2010
Code:
/home auto_home -nobrowse

I believe this line indicates that it is.
I have had issues like this is the past from the automounter, and unless you *need* this functionality, I normally disable it by removing this line from /etc/auto_master and re-start the automounter.
This is not really a fix, but a workaround.
Another tack would be to checkout the Solaris Patches as it may well be a known issue.
# 7  
Old 08-09-2010
Hi, I'm afraid I cant disable it. Can this user home directory be moved to /export/home/agent instead of /home/agent. Will this fix the problem?
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. Windows & DOS: Issues & Discussions

Account added to group

Hi , Is there a way to find out when an account was added to a group in Windows 2003?Could you please tell me how to find that? Regards, Maddy (1 Reply)
Discussion started by: Maddy123
1 Replies

2. UNIX for Dummies Questions & Answers

Remove a secondary group from user (Linux)

Oracle Linux 6.6 grid user's secondary groups are asmadmin,asmdba,asmoper and dba # id -a grid uid=638(grid) gid=2000(oinstall) groups=2000(oinstall),2100(asmadmin),2200(dba),2300(asmdba),2301(asmoper) I want to remove dba as the secondary group for grid and keep the remaining ones. ie. I... (5 Replies)
Discussion started by: John K
5 Replies

3. Linux

Openldap add user to secondary group

Hello, i try to add user john to secondary group, named groupB this will add as primary group, how can i add to secondary group?? dn: cn=groupB,ou=Groups,dc=ldap-server,dc=com changetype: modify add: memberuid memberuid: john (1 Reply)
Discussion started by: prpkrk
1 Replies

4. Red Hat

How to find Secondary Group only?

Hi, I would like to know how to find our secondary group of user only. I have used the command id -Gn user1 it is showing both groups of user. Primary and secondary group. (2 Replies)
Discussion started by: manoj.solaris
2 Replies

5. UNIX for Advanced & Expert Users

creating a secondary read only group with setfacl

We have created ACL's to allow two differnet groups to access some directories. You can see output from getfacl below. group::rwx group:rbauser:r-- The original group has full access, the secondary group has read only. However users in the secondary group can't see the directories. Think this... (1 Reply)
Discussion started by: dw82199
1 Replies

6. Solaris

Secondary group info source

Experts, I know when I use id it shows only the primary group information for the given user, and that info comes from passwd file. When I use groups it shows all groups user are member of, however from where come information given by groups command? grep fmtt3990 /etc/passwd... (6 Replies)
Discussion started by: fmattos
6 Replies

7. UNIX for Dummies Questions & Answers

How many user can be added to single group

Hi There, How many user can be added to a unix single group. I need this for unix and solaris. BRs -----Post Update----- I'm asking about secondary group and not primary group. All the users are having 8 character as their username. value is set for getconf LINE_MAX is... (1 Reply)
Discussion started by: maestromani
1 Replies

8. Shell Programming and Scripting

List ALL users in a Unix Group (Primary and Secondary)

Is there a command or better combination of cmds that will give me the list of Unix users in a particular Unix group whether their primary group is that group in question (information stored in /etc/passwd) or they are in a secondary group (information stored in /etc/group). So far all I got... (5 Replies)
Discussion started by: ckmehta
5 Replies

9. UNIX for Dummies Questions & Answers

Assigning existing users to a secondary group

Hi!!, I am on HP UX -11. I have created a new group and want to assign some the users to this group without changing their existing group ( The new group is the secondary group for them) Any ideas how to do it?? SAM doesnt seem to be working.. Any way of doing it from command line?? ... (1 Reply)
Discussion started by: jyotipg
1 Replies

10. UNIX for Dummies Questions & Answers

How to find All Primary and Secondary Group ID's for a user

Is there any command which can list me all the Group ID's (Primary, Secondary ) assocaited with a single user. Thanks Sanjay (2 Replies)
Discussion started by: sanjay92
2 Replies
Login or Register to Ask a Question