On Thu, Mar 28, 2002 at 11:01:23AM -0800, James Bagley Jr wrote: > Hey all, > > I have users that need root access to their workstations. Reading the pam > documentation for the pam_wheel module it sounds like I can allow them to > 'su -' without entering a password. This is ideal because I don't want to > give them that root password, i'd rather keep that to myself. Problem is, > it doesn't work. I'm using red hat 7.2. Here is the contents of > /etc/pam.d/su: Sudo is a much better tool for this. However, if they have root access (which su - is), they can simply change the root password. Sudo, properly configured can help to solve that problem. -- Share and Enjoy.