moby: su in centos returns "could not open session"

I build a hadoop docker based on the centos image in this repo. For security reasons, hadoop make the permisson of hdfs command to user “hdfs” by default. When I tried to run the hdfs commands as user hdfs by su like:

#su hdfs hdfs dfs -mkdir /user

the system refused me of changing user with message “could not open session”.

The interesting phenomenon is that when I created a user by useradd ambling && su ambling, there was no error at all and I successfully changed to ambling.

After some search, I edited the file ** /etc/pam.d/su ** and changed the session part of “include” to optional, then I can use su to change to hdfs.

I don’t know the exact reason for this error or whether there may be some side effect to my solution. I guess that the cause may be some misses of necessary part in the centos kernel in the process of building the official centos base image.