Kurian, Is the suid bit set on the su binary? Aaron -----Original Message----- From: redhat-list-bounces@xxxxxxxxxx [mailto:redhat-list-bounces@xxxxxxxxxx] On Behalf Of Kurian Thayil Sent: Saturday, January 10, 2009 12:35 AM To: redhat-list@xxxxxxxxxx Subject: cannot set groups - Error Hi All, One of the RHEL 5.1 servers that I have installed is giving me the error *"su: cannot set groups: Operation not permitted"* whenever I try doing *su -* as an ordinary user. /etc/passwd and /etc/group is world readable and owner and group is root. *[kurian@rhel-test ~]$ ls -l /etc/passwd;ls -l /etc/group -rw-r--r-- 1 root root 1656 Jan 9 21:06 /etc/passwd -rw-r--r-- 1 root root 646 Jan 9 21:06 /etc/group* The following is the log message in /var/log/secure whenever I do this operation. *Jan 10 16:31:15 rhel-test su: pam_keyinit(su-l:session): Unable to change GID to 0 temporarily Jan 10 16:31:15 rhel-test su: pam_keyinit(su-l:session): Unable to change GID to 0 temporarily Jan 10 16:31:15 rhel-test su: pam_unix(su-l:session): session opened for user root by kurian(uid=500) Jan 10 16:31:15 rhel-test su: pam_unix(su-l:session): session closed for user root* I am able to login to the server directly as root. Do suggest some tips to resolve this issue. Thanks in advance. Regards, Kurian Mathew Thayil. -- redhat-list mailing list unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe https://www.redhat.com/mailman/listinfo/redhat-list -- redhat-list mailing list unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe https://www.redhat.com/mailman/listinfo/redhat-list