Cron, Solaris 8, Kerberos
Derek Yarnell
derek at cs.umd.edu
Mon Apr 29 15:07:22 EDT 2002
I have been getting these messages in my debug,
Apr 29 14:00:00 stupid cron[4417]: [ID 833576 user.debug] pam_setcred:
error Can not retrieve user credentials
I noticed from a Google Groups thread from this news group back
in 2001 that the same question was asked. However no answer was
given so I am posting the question.
Why is pam getting called in cron? /var/cron/log does not give
any useful information.
my pam.conf looks like this,
login auth sufficient /usr/lib/security/krb5/pam_krb5.so.1
login auth required /usr/lib/security/$ISA/pam_unix.so.1 try_first_pass
rlogin auth sufficient /usr/lib/security/$ISA/pam_rhosts_auth.so.1
rlogin auth required /usr/lib/security/$ISA/pam_unix.so.1
rsh auth required /usr/lib/security/$ISA/pam_rhosts_auth.so.1
dtlogin auth sufficient /usr/lib/security/krb5/pam_krb5.so.1
dtlogin auth required /usr/lib/security/$ISA/pam_unix.so.1 try_first_pass
dtsession auth required /usr/lib/security/$ISA/pam_unix.so.1
other auth sufficient /usr/lib/security/krb5/pam_krb5.so.1
other auth required /usr/lib/security/$ISA/pam_unix.so.1 try_first_pass
login account requisite /usr/lib/security/$ISA/pam_roles.so.1
login account required /usr/lib/security/$ISA/pam_projects.so.1
login account required /usr/lib/security/$ISA/pam_unix.so.1
dtlogin account requisite /usr/lib/security/$ISA/pam_roles.so.1
dtlogin account required /usr/lib/security/$ISA/pam_projects.so.1
dtlogin account required /usr/lib/security/$ISA/pam_unix.so.1
other account sufficient /usr/lib/security/krb5/pam_krb5.so.1
other account requisite /usr/lib/security/$ISA/pam_roles.so.1
other account required /usr/lib/security/$ISA/pam_projects.so.1
other account required /usr/lib/security/$ISA/pam_unix.so.1
other session sufficient /usr/lib/security/krb5/pam_krb5.so.1
other session required /usr/lib/security/$ISA/pam_unix.so.1
other password sufficient /usr/lib/security/krb5/pam_krb5.so.1
other password required /usr/lib/security/$ISA/pam_unix.so.1
try_first_pass
Anyone had the same problem?
More information about the Kerberos
mailing list