pam_wheel should help only users belonging to group 0 or some other group, which can be specified as a module argument can 'su' to superuser account, I hope this was your intention. Tomas Winkler The System Group CSE HUJI On Wed, 24 Oct 2001, Florian Florin wrote: > Hi, > > How can I restrict for some of the users to take "su -" in the telnet > console? > > Thank's for your help .... > > > > _______________________________________________ > > Pam-list@redhat.com > https://listman.redhat.com/mailman/listinfo/pam-list >