Hello Forum,

I am having an odd occurence. When i do a su in a terminal or console session, I am able get authenticated as superuser without using the full or correct root password. Anyone have any idea?

-AJ

check your /etc/hosts.equiv and .rhosts files.....
trusted host allow user logins without password.
also uncomment the line console=/dev/console in /etc/default/login , and sulog=/var/adm/sulog in /etc/default/su , to check the problem on console.

raju

Thanks for your response raju. Well i do not have the file hosts.equiv or .rhost in my /etc directory. All the other areas were already uncommented. It's funny, if my root password was solaris2000, i can su by just typing in solaris or solaris20. However, if I use a word not remotely close to spelling of actual password, I am denied access. Anyone notice this?

Can you compare the "su" binary with the su on your original media? Also, type "which su" to make sure you're using the "real" su...

Also, which Unix variant are you using? (uname -a)

On most unix systems the password is limited to 8 characters. You can enter more, but the extra trailing characters are ignored.