How to su as root to a user account protected by securid without getting Passcode prompted.
Originally Published: 2000-11-20
Last Modified: 2023-10-06
Article Number
Applies To
UNIX (AIX, HP-UX, Solaris)
RSA ACE/Agent for UNIX
sdshell
sdshell_adm
sdshell_auth
Issue
Usage for the different SecurID shells on UNIX.
How to su to other users accounts without getting PASSCODE prompted.
Resolution
sdshell ---> The shell that requires RSA SecurID authentication of users on UNIX clients, including AIX clients using name servers such as NIS or DNS, but excluding AIX clients using an authentication method defined in /etc/security/login.cfg.
sdshell_auth ---> The shell used to RSA SecurID-authenticate users on AIX clients that do not use name servers. A user?s primary authentication method on these clients must be ?SecurID,? and RSA SecurID must be defined in /etc/security/login.cfg to run sdshell_auth.
sdshell_adm ---> For system administrators who prefer the convenience of using the su command without having to provide an RSA SecurID PASSCODE, a third authentication shell, sdshell_adm, is provided.
Related Articles
'su -' doesn't prompt for passcode on SUSE with PAM Agent 29Number of Views Configuring su on Red Hat Linux 4.0 does not work with RSA Authentication Agent for PAM 5Number of Views 'su: cannot set user id: Resource temporarily unavailable' error when logging in to the Application Server as the Oracle u… 77Number of Views Error 'cannot set user id: Resource temporarily unavailable' while trying to login or su as user oracle in RSA Identity Go… 118Number of Views A device has changed from Unknown to a known device type and there is data that needs to be migrated. 18Number of Views
Trending Articles
RSA MFA Agent 2.5 for Microsoft Windows Installation and Administration Guide RSA Authentication Manager 8.1 Quick Setup Fails with "Failed to Attach Replica Instance" User Application Portal How to manipulate imported RSA SecurID Software Token(s) on an iPhone or iPad device The RSA Identity Governance & Lifecycle AD Collector and AD ADC authentication source fail to establish a TLS 1.2 SSL conn…
Don't see what you're looking for?