Cron, Solaris 8, Kerberos

Derek Yarnell derek at cs.umd.edu
Mon Apr 29 15:07:22 EDT 2002


I have been getting these messages in my debug,

Apr 29 14:00:00 stupid cron[4417]: [ID 833576 user.debug] pam_setcred: 
error Can not retrieve user credentials

I noticed from a Google Groups thread from this news group back
in 2001 that the same question was asked. However no answer was
given so I am posting the question.

Why is pam getting called in cron? /var/cron/log does not give
any useful information.

my pam.conf looks like this,

login   auth sufficient /usr/lib/security/krb5/pam_krb5.so.1
login   auth required   /usr/lib/security/$ISA/pam_unix.so.1 try_first_pass
rlogin  auth sufficient /usr/lib/security/$ISA/pam_rhosts_auth.so.1
rlogin  auth required   /usr/lib/security/$ISA/pam_unix.so.1
rsh     auth required   /usr/lib/security/$ISA/pam_rhosts_auth.so.1
dtlogin auth sufficient /usr/lib/security/krb5/pam_krb5.so.1
dtlogin auth required   /usr/lib/security/$ISA/pam_unix.so.1 try_first_pass
dtsession auth required /usr/lib/security/$ISA/pam_unix.so.1
other   auth sufficient /usr/lib/security/krb5/pam_krb5.so.1
other   auth required   /usr/lib/security/$ISA/pam_unix.so.1 try_first_pass
login   account requisite       /usr/lib/security/$ISA/pam_roles.so.1
login   account required        /usr/lib/security/$ISA/pam_projects.so.1
login   account required        /usr/lib/security/$ISA/pam_unix.so.1
dtlogin account requisite       /usr/lib/security/$ISA/pam_roles.so.1
dtlogin account required        /usr/lib/security/$ISA/pam_projects.so.1
dtlogin account required        /usr/lib/security/$ISA/pam_unix.so.1
other   account sufficient      /usr/lib/security/krb5/pam_krb5.so.1
other   account requisite       /usr/lib/security/$ISA/pam_roles.so.1
other   account required        /usr/lib/security/$ISA/pam_projects.so.1
other   account required        /usr/lib/security/$ISA/pam_unix.so.1
other   session sufficient      /usr/lib/security/krb5/pam_krb5.so.1
other   session required        /usr/lib/security/$ISA/pam_unix.so.1
other   password sufficient     /usr/lib/security/krb5/pam_krb5.so.1
other   password required       /usr/lib/security/$ISA/pam_unix.so.1 
try_first_pass


Anyone had the same problem?




More information about the Kerberos mailing list