From 101c70d3c1375d6a434f87465bdba6722ad764ed Mon Sep 17 00:00:00 2001 From: Matthijs Kooijman Date: Wed, 31 Dec 2008 00:00:45 +0100 Subject: [PATCH] pam: Let pam.d/cron include common-account. The changes to common-account make the custom account section of pam.d/cron unneeded. --- etc/pam.d/cron | 10 ++++------ 1 file changed, 4 insertions(+), 6 deletions(-) diff --git a/etc/pam.d/cron b/etc/pam.d/cron index 938d30f..d85f413 100644 --- a/etc/pam.d/cron +++ b/etc/pam.d/cron @@ -2,15 +2,13 @@ # The PAM configuration file for the cron daemon # +# cron uses pam_set_cred so it needs a working auth section. It does not do +# any other real authentication. auth sufficient pam_unix.so -@include common-auth -# This is required instead of sufficient, since pam_unix mostly does checks -# based on NSS, so this will also work for ldap users. -account required pam_unix.so -# We use a custom control spec so we won't fail on user_unknown special -account [success=ok new_authtok_reqd=ok user_unknown=ignore ignore=ignore default=bad] pam_ldap.so +@include common-auth +@include common-account @include common-session -- 2.30.2