
SU(1)                        UNIX Reference Manual                       SU(1)

NNAAMMEE
     ssuu - substitute user identity

SSYYNNOOPPSSIISS
     ssuu [--KK | ----nnoo--kkeerrbbeerrooss] [--ff] [--ll | ----ffuullll] [--mm] [--ii _i_n_s_t_a_n_c_e |
        ----iinnssttaannccee==_i_n_s_t_a_n_c_e] [--cc _c_o_m_m_a_n_d | ----ccoommmmaanndd==_c_o_m_m_a_n_d] [_l_o_g_i_n [_s_h_e_l_l
        _a_r_g_u_m_e_n_t_s]]

DDEESSCCRRIIPPTTIIOONN
     ssuu will use Kerberos authentication provided that an instance for the us-
     er wanting to change effective UID is present in a file named _._k_5_l_o_g_i_n in
     the target user id's home directory

     A special case exists for `root' where roots _~_/_._k_5_l_o_g_i_n needs to contain
     a row like: "user/root@REALM" for su to succed.

     In the absence of either an entry for current user in said file or other
     problems like missing host/hostname@REALM keys in systems keytab, or user
     typing the wrong password, ssuu will fall back to traditional _/_e_t_c_/_p_a_s_s_w_d
     authentication.

     The options are as follows:

     --KK, ----nnoo--kkeerrbbeerrooss don't use Kerberos.

     --ff don't read .cshrc.

     --ll, ----ffuullll simulate full login.

     --mm leave environment unmodified.

     --ii _i_n_s_t_a_n_c_e, ----iinnssttaannccee==_i_n_s_t_a_n_c_e root instance to use.

     --cc _c_o_m_m_a_n_d, ----ccoommmmaanndd==_c_o_m_m_a_n_d command to execute.

BBUUGGSS
     Note that on BSD systems, where system ssuu honors wheel group and denies
     ssuu to others, all users may become root if they know the root password,
     regardless of wheel membership.

 HEIMDAL                        March 23, 2004                               1
