We have a number of development servers, each running a number of services such as Jetty, ActiveMQ etc. There is a specific user account on each server which is used for running these services. Developers occasionally need to start/stop these services. Currently they need to take care to always 'su' to the correct user account (which they sometimes forget) or directly log in as this user account (which is not the most secure way to do things). Is it possible to set things up so that each user logs in with their own user account and then immediately their session gets 'su'-d to the correct user account? I looked at PAM manuals which seemed the most obvious place to do this, but nothing immediately caught my eye.