[Freeipa-users] freeIPA user can not use cron

[Karl Forner]

%ipa hbactest
User name: qbuser
Target host: asgard
Service: crond
--------------------
Access granted: True

On Thu, Oct 15, 2015 at 3:53 PM, Karl Forner <karl.forner at gmail.com> wrote:
> Hi,
>
> cron jobs do no work using a freeIPA user account.
>
> the cron job:
> */1 * * * * echo coucou
>
> in /var/log/syslog:
> Oct 15 15:48:02 asgard CRON[9779]: Permission denied
>
> in /var/log/auth.log:
> Oct 15 15:48:02 asgard CRON[9779]: pam_sss(cron:account): Access
> denied for user qbuser: 6 (Permission denied)
>
> in freeIPA I setup an hbac rule for this user and host that allow the services:
> ftp
> login
> sshd
> gdm-password
> crond
> gdm
>
> What did I miss ?
>
> Thanks.
>
> Karl Forner