[Freeipa-users] How to set a user group rule to allow su - oracle only?

[Simo Sorce]

On Mon, 2012-07-16 at 21:45 +0000, Steven Jones wrote:
> Hi,
> 
> If I login as say user1,  I want that user to be able to su - oracle, but not to say su - root (or to any other user).
> 
> If user2 logins I want them unable to su - X at all and especially not root.
> 
> If an admin logins in I want them to be able to su - anybody...
> 
> In a way before I could do that with the wheel group and pam.

I think you want to look at sudo -i

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York