What this software is for: With su, user A can switch to user B, using user B's password. With gsu, user A can switch to user B, using user A's password, but only if a config file or config file+yp map allows it. This is bad, because shared accounts suck, but it's good because if you have to use a shared account, at least you don't need a shared password, and can change who has access to said shared account without having to change a password and redistribute it to n people. To configure this software: Edit /var/adm/groupleader. Put in it something like: ~root:*:aguillen,cmelzer +~dcs In this example, aguillen and cmelzer can gsu to root using their own respective passwords. Also, a list of users can gsu to the account "dcs" based on a list in the groupleader.bygroup NIS map. This map might contain key and data like: ~dcs ~dcs:*:iglesias,roode So given the combination of "+~dcs" in /var/adm/groupleader and this entry in groupleader.bygroup, iglesias and roode can gsu to dcs using their own passwords. The ~ is required; just do it. The * is there for backwards compatibility with a previous version of gsu, and is ignored. Building the software: Edit the Makefile. Uncomment the line that looks closest to your OS. You may have to define a method of -safely- doing getpass() in the source if your platform hasn't been ported to yet, and it'll give an error if not so don't worry you're getting a version you shouldn't - at least not unless you tweak it on your own without being careful. Then say "make". If it builds successfully say "make install". Comments desired: Comments like "You have a buffer overflow at line such and so" would be very helpful. Comments like "YP sucks. You shouldn't use it." aren't helpful. We're going to continue using YP. If you don't want to, don't configure it, and be happy. Comments like "Shared accounts suck. You shouldn't use them" aren't helpful. Some folks need them, some don't. Have gsu makes shared accounts less of a problem. Yes, they're still a problem, but for some the benefits (particularly when using gsu) outweight the disadvantages. If you don't need them, don't use them, and be happy. Who's responsible for this blecherous software: I understand it was Dana Roode's idea originally. Applause for an idea that makes the best of a bad situation. If there are implementation bugs, that's my fault: Dan Stromberg . Please let me know about them so I can fix them. Patches welcome too. Where to get the latest version: ftp://autoinst.acs.uci.edu/pub/gsu License: I really prefer the GPL, but please consider this under a UC Regent's copyright, like the *BSD's, since I wrote it on university time while working at UCI.