Mailinglist Archive: opensuse (1945 mails)
| < Previous | Next > |
Re: [opensuse] PAM prevents root access to crontab ?
- From: Ben DJ <bendj095124367913213465@xxxxxxxxx>
- Date: Thu, 17 Dec 2009 08:46:11 -0800
- Message-id: <babafd2f0912170846r2c388bf7x4e17cdb6addd5c9e@xxxxxxxxxxxxxx>
Hi,
On Thu, Dec 17, 2009 at 8:28 AM, Jan Ritzerfeld
<suse@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
as installed -- i.e., I've never touched it,
cat /etc/pam.d/crond
#
# The PAM configuration file for the cron daemon
#
#
# No PAM authentication called, auth modules not needed
account required pam_access.so
account include password-auth
session required pam_loginuid.so
session include password-auth
SYNOPSIS
crontab [-u user] file
crontab [-u user] [-l | -r | -e] [-i] [-s]
the 2nd line looks like all options are optional -- i.e., 'crontab'
alone is fine.
but, in any case, 'crontab -e' returns exactly the same result as above ...
Permission denied
You (root) are not allowed to access to (crontab) because of pam
configuration.
I didn't suggest that.
BenDJ
--
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse+help@xxxxxxxxxxxx
On Thu, Dec 17, 2009 at 8:28 AM, Jan Ritzerfeld
<suse@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
The file /etc/pam.d/password-auth does not exist on both 11.1 and 11.2.
Furthermore, "grep -r password-auth /etc/pam.d/" does not give any hit for
me. Do you have any line like "...include...password-auth" in your
/etc/pam.d/crond?
as installed -- i.e., I've never touched it,
cat /etc/pam.d/crond
#
# The PAM configuration file for the cron daemon
#
#
# No PAM authentication called, auth modules not needed
account required pam_access.so
account include password-auth
session required pam_loginuid.so
session include password-auth
Using a fresh 11.2 installation, crontab works. Besides "crontab" alone is
not a valid command, there must be some option.
SYNOPSIS
crontab [-u user] file
crontab [-u user] [-l | -r | -e] [-i] [-s]
the 2nd line looks like all options are optional -- i.e., 'crontab'
alone is fine.
but, in any case, 'crontab -e' returns exactly the same result as above ...
Permission denied
You (root) are not allowed to access to (crontab) because of pam
configuration.
Well, I do not think that it would be that practical to mention every
application that uses pam in the pam man page.
I didn't suggest that.
What's PAM got to do with cron, and how do I get permission to access it?
It is used for access control.
BenDJ
--
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse+help@xxxxxxxxxxxx
| < Previous | Next > |