Originally posted by: Solbore

System:
6.1.0.0

In WPAR created with -l (writable /usr, /opt) non-privileged user can su to root without asking password. Same user in global system works as expected. Su to e.g. daemon user is asking for password.

$ id
uid=103(jezbera) gid=1(staff) groups=100(usr),101(gmc),105(devel)

In sudoers there is no NOPASSWD statement and no alias is created to su.

$ sudo su
Sorry, user jezbera is not allowed to execute '/usr/bin/su' as root on aix6-dev.

But su command is not asking for password.

Originally posted by: MarkTaylor

Have you sudo'd up once already giving the password ? sudo can cache passwords .. check the levels of sudo and sudo configs in both envs ..

HTH
Mark Taylor

Originally posted by: Solbore

I don't have problem with sudo, but with su command. By testing 'sudo su' I have verified, that su is not alias to sudo su, because sudo is asking for password. I have recreated my WPAR once more (I have to move LVs to another VG), but I still have same problem. I can su without password in default configuration.

Originally posted by: alethad

Have you set a password for root in your WPAR?

You've got to continue to grow, or you're just like last night's cornbread -- stale & dry Loretta Lynn alethad

Originally posted by: Solbore

You are right! I always use clogin to log as root :-)

Thank you

Originally posted by: MarkTaylor

So, you logged in as root and wondered why you could su without a password ? I suspect the problem is somewhere between the keyboard and the chair then XD

Rgds
Mark Taylor

Originally posted by: Solbore

No. Read my original question. Problem was, that root account does not have password set, because when you create WPAR, then you are not asked to change password. It is not installation. I use clogin to access WPAR environment, created user account, but root password was not change.