I am able to run anything using sudo; my password is accepted. But whenever I try to do su from a shell, it fails with:
su: incorrect password
What can the problem be?
Add a comment
|
2 Answers
su means substitute user and if it is called without any arguments you will become the superuser. Therefore you have to enter the root password.
This is some kind of unhandy if many people need to use commands for the system administration or similar stuff with extended user rights. You just don't want that people have unlimited rights by sharing all the same root password.
The solution for this kind of problems is sudo ("substitute user do").
This will allow you to specify the commands someone can invoke and define the permissions. For sudo you don't have to enter the root password, but the password of the user who tries to invoke a sudo command.
Some distributions have the root user disabled for security reasons. This could be one explanation why you aren't able to use su. In that case, to obtain a shell with root privileges use sudo -s ;-)
-
5It is recommended to do that last bit as
sudo su -where the dash means set the environment according the the user's (in this case root's) login profile. This usually affords a slight increase in PATH security but still doesn't protect againstecho hi > /dev/my_critical_filesystemmsw– msw2010-09-07 17:44:59 +00:00Commented Sep 7, 2010 at 17:44 -
aaah forgot this one :-) thx for the addition!echox– echox2010-09-07 18:13:42 +00:00Commented Sep 7, 2010 at 18:13
-
@echox: Then, is there any difference between
$ scriptand$ sudo script? The user is the same in both the cases.Lazer– Lazer2010-09-07 19:42:26 +00:00Commented Sep 7, 2010 at 19:42 -
sudo allows a permitted user to execute a command as the superuser or another user, as specified in the sudoers file.- from man sudo. Usually the script will be invoked with root privileges. That is the difference.echox– echox2010-09-07 20:52:25 +00:00Commented Sep 7, 2010 at 20:52 -
1@Chris: unfortunately, that's required if you want to inherit the entire root user environment, including its PATH. Incidentally, I just found out that "sudo -s", which I commented on above but have now removed, is more equivalent to "sudo su", without the dash: no change to CWD, no change to PATH.Warren Young– Warren Young2010-09-08 10:18:17 +00:00Commented Sep 8, 2010 at 10:18
The su command without options, will default to allow you to become the root user. It isn't asking for your password, but the root password.
The sudo command always asks for your password.
-
2as a side note, if you use Ubuntu, by default has the root password locked, so you may not know the root password help.ubuntu.com/community/RootSudophunehehe– phunehehe2010-09-07 15:12:20 +00:00Commented Sep 7, 2010 at 15:12
-
3"The sudo command always asks for your password." Actually that's configurable. It may also be configured to ask for the root password or the password of the target user (or for no password at all).sepp2k– sepp2k2010-09-08 09:33:24 +00:00Commented Sep 8, 2010 at 9:33