Mailinglist Archive: opensuse (1945 mails)

< Previous Next >
Re: [opensuse] PAM prevents root access to crontab ?
  • From: Ben DJ <bendj095124367913213465@xxxxxxxxx>
  • Date: Thu, 17 Dec 2009 08:46:11 -0800
  • Message-id: <babafd2f0912170846r2c388bf7x4e17cdb6addd5c9e@xxxxxxxxxxxxxx>
Hi,

On Thu, Dec 17, 2009 at 8:28 AM, Jan Ritzerfeld
<suse@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
The file /etc/pam.d/password-auth does not exist on both 11.1 and 11.2.
Furthermore, "grep -r password-auth /etc/pam.d/" does not give any hit for
me. Do you have any line like "...include...password-auth" in your
/etc/pam.d/crond?

as installed -- i.e., I've never touched it,

cat /etc/pam.d/crond
#
# The PAM configuration file for the cron daemon
#
#
# No PAM authentication called, auth modules not needed
account required pam_access.so
account include password-auth
session required pam_loginuid.so
session include password-auth


Using a fresh 11.2 installation, crontab works. Besides "crontab" alone is
not a valid command, there must be some option.

SYNOPSIS
crontab [-u user] file
crontab [-u user] [-l | -r | -e] [-i] [-s]

the 2nd line looks like all options are optional -- i.e., 'crontab'
alone is fine.

but, in any case, 'crontab -e' returns exactly the same result as above ...
Permission denied
You (root) are not allowed to access to (crontab) because of pam
configuration.

Well, I do not think that it would be that practical to mention every
application that uses pam in the pam man page.

I didn't suggest that.

What's PAM got to do with cron, and how do I get permission to access it?

It is used for access control.



BenDJ
--
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse+help@xxxxxxxxxxxx

< Previous Next >
References