If you have turned root into a role in a zone and try to use zlogin from the global zone to log in as root
you will see something like this:
root@global# zlogin zn1 [Connected to zone 'zn1' pts/2] Login incorrect [Connection to zone 'zn1' pts/2 closed]
This is because pam.conf is by default configured to prevent this,
as roles must only be assumed by authorized users.
If you trust the ones who can become root in the global zone,
you can change this restriction by adding the following line to pam.conf
zlogin account required pam_unix_account.so.1
Now you can zlogin directly to a role without having to first log in to a normal user:
root@global# zlogin zn1 [Connected to zone 'zn1' pts/2] Sun Microsystems Inc. SunOS 5.11 snv_75 October 2007 root@zn1#
