[Freeipa-users] freeIPA user can not use cron

[Zoske, Fabian]

Hi,

we just had the same problem.

You need to add a new service "cron" and assign this to the user/group.

Best regards,
Fabian

-----Ursprüngliche Nachricht-----
Von: freeipa-users-bounces at redhat.com [mailto:freeipa-users-bounces at redhat.com] Im Auftrag von Karl Forner
Gesendet: Donnerstag, 15. Oktober 2015 15:53
An: freeipa-users at redhat.com
Betreff: [Freeipa-users] freeIPA user can not use cron

Hi,

cron jobs do no work using a freeIPA user account.

the cron job:
*/1 * * * * echo coucou

in /var/log/syslog:
Oct 15 15:48:02 asgard CRON[9779]: Permission denied

in /var/log/auth.log:
Oct 15 15:48:02 asgard CRON[9779]: pam_sss(cron:account): Access denied for user qbuser: 6 (Permission denied)

in freeIPA I setup an hbac rule for this user and host that allow the services:
ftp
login
sshd
gdm-password
crond
gdm

What did I miss ?

Thanks.

Karl Forner

--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project