%groups
wheel
%su
su: pam_start: system error
%
---auth.log---

Nov 20 19:41:46 bsdweb su: in openpam_read_chain(): /etc/pam.d/su(11): invalid facility '_only' (ignored)
Nov 20 19:41:46 bsdweb su: pam_start: system error
Nov 20 19:43:16 bsdweb su: in openpam_read_chain(): /etc/pam.d/su(11): invalid facility '_only' (ignored)
Nov 20 19:43:16 bsdweb su: pam_start: system error