PAM questions (was: RE: group 'root' does not exist?!)

["Christian Pernegger" <pernegger@chello.at>]

> adduser can't distinguish group root from user root, its a bug.  

Hmmm...

> i would recommend against using group root for this purpose, instead
> add a new group `wheel' and use that.

<snip good reasons>

> for pam add this line to the top of your /etc/pam.d/su file:
> 
> auth        requisite   pam_wheel.so group=wheel debug

The example says required, but requisite is the far better choice - thanks!

Another question: in /etc/pam.d/login there is a line that causes
/etc/issue to be shown - it was commented out on my box, still
an issue is displayed.

I activated it and expected to see the issue line twice, which I
didn't. What displays issue if the PAM option has no apparent
effect?


Thank you for your help!

Christian