syslog entries for invalid su varies for different users.
On my system, if I fail while attempting an su to: "root" or "named",
the syslog entries appear as:
Aug 11 09:25:25 mybox PAM_pwdb: authentication failure;
arhodes(uid=500) -> root for su service
Aug 11 09:25:31 mybox PAM_pwdb: authentication failure;
arhodes(uid=500) -> named for su service
However, if I attempt to su to "bin" or "operator", all I get in
the syslog entry is:
Aug 11 09:51:38 xanax PAM_pwdb: get passwd; pwdb: request not
Aug 11 09:51:54 xanax PAM_pwdb: get passwd; pwdb: request not
Anyone know why PAM_pwdb would exhibit these different behaviors?
The pam_pwdb module is being replaced by the pam_unix module (which works
correctly) for upcoming releases.