Cannot su to "foo" : Authentication is denied.

bar@somehostname:/home/bar> su - foo
foo's Password:
Cannot su to "foo" : Authentication is denied.

La solución es la siguiente

chmod 4555 /usr/bin/su 

Listo.