[CentOS] Chicken and egg question: passwd and cronjob

[Michael Gliwinski]

On Thursday 23 Jun 2011 08:54:21 Fajar Priyanto wrote:
> > AFAIK, account does not need to have a password at all for cron to work.
> > 
> > Apart from that if you're going to automatically reset root's password
> > you may as well just avoid expiring it at all.
> 
> In /var/log/cron I see this when the password expires. And cronjob fail to
> run.
> 
> Jun 23 02:50:01 my-srv crond[4424]: CRON (root) ERROR: failed to open
> PAM security session: Success
> Jun 23 02:50:01 my-srv crond[4424]: CRON (root) ERROR: cannot set
> security context
> Jun 23 03:00:01 my-srv crond[4425]: Authentication token is no longer
> valid; new one required

What does your /etc/pam.d/crond and /etc/pam.d/system-auth look like?  Also, 
what version of CentOS is it?

Must admit, I'm not sure about the password expiring, but I just tested it on 
disabled accounts (both local and Kerberos/LDAP) and it works.


-- 
Michael Gliwinski
Henderson Group Information Services
9-11 Hightown Avenue, Newtownabby, BT36 4RT
Phone: 028 9034 3319

**********************************************************************************************
The information in this email is confidential and may be legally privileged.  It is intended solely for the addressee and access to the email by anyone else is unauthorised.
If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it, is prohibited and may be unlawful.
When addressed to our clients, any opinions or advice contained in this e-mail are subject to the terms and conditions expressed  in the governing client engagement leter or contract.
If you have received this email in error please notify support at henderson-group.com

John Henderson (Holdings) Ltd
Registered office: 9 Hightown Avenue, Mallusk, County Antrim, Northern Ireland, BT36 4RT.
Registered in Northern Ireland
Registration Number NI010588
Vat No.: 814 6399 12
*********************************************************************************