Return
-
Title
sudo su QASaccount resulting in: su: incorrect password -
Description
When running a sudo su - user an error of "su: incorrect password" occurs. Running as root also results in the error.
When logged in as an AD unix enabled account sudo su - <other account> the other account needs to be in the users.allow file and not just the first AD account that was used to login with.
After adding the user account explicitly into the users.allow configuration section of the GPO on this particular container in order to allow members of the group to sudo su over to account. -
Cause
PAM configuration issue -
Resolution
1 - Edit the /etc/pam.d/su-l fileAdded "account sufficient pam_rootok.so" after auth include common-auth.This allowed them to su without adding the secondary user to the allow file.