On Thursday, 4 November 2004 22.22, Ryan McCain wrote:
Can someone help me understand this?
the user "tstaffor" does not have the same UID as root, however when he does "su -", it doesnt prompt him for a password. I've never seen this.
dss-dr93la01:~ # who tstaffor pts/4 Nov 4 10:08 (172.20.11.82) dss-dr93la01:~ # w 13:13:49 up 6 days, 4:50, 1 user, load average: 0.00, 0.00, 0.00 USER TTY LOGIN@ IDLE JCPU PCPU WHAT tstaffor pts/4 10:08 0.00s 0.14s 0.01s sshd: tstafford [priv] dss-dr93la01:~ # su -
That prompt looks a bit suspicious. What did "whoami" say before the su here? Are you sure he wasn't already su:ed to root? root doesn't get asked for a password.
dss-dr93la01:~ # whoami root dss-dr93la01:~ #
I'll bet you have to do "exit" twice here to get back to a regular user