[KLUG Members] LDAP fedora core, and cron

Adam Tauno Williams awilliam at whitemice.org
Thu Nov 10 15:09:00 EST 2005


> Has any of you ever converted authentication to LDAP

Yes

> and then have CRON die for  the LDAP users?

No.

> On a red hat 7.3 machine, I was able to copy an existing file in
> /etc/pam.d and get it working again, but on fedora core machines, it's
> different, and I don't know what needs to be put into the cron file.

I'd have to imagine it is an NSS problem.  Perhaps you have local UIDs defined
on the FC3 box that are not on the RH73 box and these ranges overlap.

> When I make my own file in /etc/pam.d and edit an LDAP user's crontab,
> cron will die (crond's master process will croak) when the job runs and
> I have to manually restart crond using the init scripts.

I think this is not a PAM issue as PAM has nothing to do with CRON.  To 
invoke a
job as a user CRON must be able to getpwent the user's information - which
passes through NSS.

> I haven't found much on the net for this - obscure debian bugs - and
> I've found how to configure it on solaris (every document seems to have
> solaris configured for LDAP and cron) but never linux in this regard.

There is nothing what-so-ever special about using CRON on a directory enabled
network or host.  The problem is almost certainly in the NSS configuration.



More information about the Members mailing list