linux - 由于 pam 配置，centOS 不允许您(root)访问(crontab)

Question

当我这样做时，我收到此错误。

crontab -e
You (root) are not allowed to access to (crontab) because of pam configuration.

我评论了下面的所有内容

cat /etc/pam.d/crond
#
# The PAM configuration file for the cron daemon
#
#
# No PAM authentication called, auth modules not needed
#account    required   pam_access.so
#account    include    password-auth
#session    required   pam_loginuid.so
#session    include    password-auth
#auth       include    password-auth

我在/etc/security/access.conf中添加了以下内容

#+ : ALL : ALL
#+ : root : cron

这是 cron 日志

Sep 19 21:01:01 localhost crond[65409]: (root) PAM ERROR (Authentication failure)
Sep 19 21:01:01 localhost crond[65409]: (root) FAILED to authorize user with PAM (Authentication failure)
Sep 19 21:02:01 localhost crond[65541]: (root) PAM ERROR (Authentication failure)
Sep 19 21:02:01 localhost crond[65541]: (root) FAILED to authorize user with PAM (Authentication failure)
Sep 19 21:03:01 localhost crond[65677]: (root) PAM ERROR (Authentication failure)
Sep 19 21:03:01 localhost crond[65677]: (root) FAILED to authorize user with PAM (Authentication failure)
Sep 19 21:04:01 localhost crond[65785]: (root) PAM ERROR (Authentication failure)
Sep 19 21:04:01 localhost crond[65785]: (root) FAILED to authorize user with PAM (Authentication failure)
Sep 19 21:05:01 localhost crond[65892]: (root) PAM ERROR (Authentication failure)
Sep 19 21:05:01 localhost crond[65892]: (root) FAILED to authorize user with PAM (Authentication failure)

root 密码设置为永不过期

chage -l root
Last password change                    : never
Password expires                    : never
Password inactive                   : never
Account expires                     : never
Minimum number of days between password change      : 0
Maximum number of days between password change      : 90
Number of days of warning before password expires   : 7

我重新启动了 crond 几次，但没有任何帮助。

非常感谢任何帮助。

Answer 1

请引用https://serverfault.com/questions/620157/how-to-fix-a-crontab-access-issue-with-a-pam-configuration-error-message寻求解决方案。

看来你不应该在access.conf中注释root。 同一链接中还有其他解决方案

希望它能解决您的问题。