http://bugzilla.novell.com/show_bug.cgi?id=533249 User jnelson-suse@jamponi.net added comment http://bugzilla.novell.com/show_bug.cgi?id=533249#c1 Jon Nelson changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jnelson-suse@jamponi.net Severity|Normal |Major --- Comment #1 from Jon Nelson 2009-11-12 20:59:33 MST --- On 11.2 *released* su is still broken: As a mortal user, I can become root: su - Once root, I can become myself, but not certain other users (not sure why...): su - jnelson (this works) su - postgres (this does not work!) When it doesn't work, /var/log/messages says: Nov 12 21:57:35 laptop su: FAILED SU (to postgres) jnelson on /dev/pts/4 Uh??? I'm not jnelson! I'm root! -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=533249 User jnelson-suse@jamponi.net added comment http://bugzilla.novell.com/show_bug.cgi?id=533249#c3 --- Comment #3 from Jon Nelson 2009-11-13 08:38:37 MST --- I'm not sure how this relates, but shadow (or passwd) entries which have ! (bang) instead of * (splat) are the ones that don't work. Splat works, bang doesn't. The passwd (5) manpage doesn't have any comments on bang, but talks about splat. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=533249 --- Comment #5 from Jon Nelson 2009-11-16 13:12:03 UTC --- What is the cause, then? If you don't know the cause, how can you rule out a possible explanation? I seem to have the same symptoms: worklaptop:~ # su - postgres su: incorrect password worklaptop:~ # su - jnelson Directory: /home/jnelson Mon Nov 16 07:11:47 CST 2009 [jnelson@worklaptop:~] -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=533249#c7 Jon Nelson changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED Resolution|INVALID | --- Comment #7 from Jon Nelson 2009-11-16 22:14:45 UTC --- This bug is *not* resolved, and appears to have everything to do with '!' vs '*' in /etc/passwd (or /etc/shadow). '!' is used to indicate a *locked* account I turned up the PAM debugging for pam_unix2 and determined that the postgres account is locked. Performing the above tests (adduser testuser, su testuser ls, etc...) still fail. Why is the behavior different in 11.2 versus 11.1? This prevented the postgresql upgrade from working properly. I had to perform the following steps, once I had an idea that it was a locked account problem: 1. pwunconv 2. vipw and change the password for 'postgres' to '*' instead of '!' - the latter indicates that the account is locked. 3. *now* I can start postgres and such. I will open a bug report regarding the passwd (5) manpage. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=533249 http://bugzilla.novell.com/show_bug.cgi?id=533249#c9 Carsten Hoeger changed: What |Removed |Added ---------------------------------------------------------------------------- Status|CLOSED |REOPENED Resolution|INVALID | --- Comment #9 from Carsten Hoeger 2009-12-09 10:11:54 UTC --- the _original_ problem is still there as I just noticed again, sorry, did not reach that point any further... oxlive:~ # useradd testuser oxlive:~ # su testuser ls su: incorrect password oxlive:~ # userdel testuser no crontab for testuser oxlive:~ # su testuser ls su: user testuser does not exist -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=533249 http://bugzilla.novell.com/show_bug.cgi?id=533249#c11 --- Comment #11 from Carsten Hoeger 2009-12-09 10:16:37 UTC --- the real problem is, that we start open-xchange using this command: su -s /bin/bash $user -c $path > /dev/null 2>&1 & echo $! > /var/run/${name}.pid which is working fine on all currently known rpm based distributions, but not on opensuse 11.2 anymore. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=533249 http://bugzilla.novell.com/show_bug.cgi?id=533249#c13 Philipp Thomas changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |RESOLVED Resolution| |INVALID --- Comment #13 from Philipp Thomas 2010-05-04 16:49:15 CEST --- As per Thorstens response it's no bug in coreutils. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.