You are not logged in.

#1 2019-02-09 22:52:05

replabrobin
Member
Registered: 2010-05-06
Posts: 190

atd authentication failures

After an upgrade today I think pam is no longer allowing atd to run my commands. I suspect pambase-20190105.1-1-any.pkg.tar.xz but it could be something else. I see this in the journal

Feb 09 21:00:00 myhost atd[7593]: pam_warn(atd:account): function=[pam_sm_acct_mgmt] flags=0x8000 service=[atd] terminal=[<unknown>] user=[myuser] ruser=[<unknown>] rhost=[<unknown>]
Feb 09 21:00:00 minikat atd[7593]: Authentication failure

If I reinstall pambase-20171006-1-any.pkg.tar.xz I get a working atd, but there's no atd file in /etc/pam.d so I guess I might need one or perhaps to add my user to some specific group.

Offline

#2 2019-02-10 01:54:11

GenkiSky
Member
Registered: 2017-04-04
Posts: 82
Website

Re: atd authentication failures

I had a similar issue with opensmtpd. My analysis was the same. The pambase 20190105.1-1 upgrade made /etc/pam.d/other (the default if there's no application-specific file) deny all requests. I filed a bug report earlier today to the opensmtpd package to add an /etc/pam.d/smtpd: https://bugs.archlinux.org/task/61696 . My guess is that is the best solution for atd too.

Edit: Relevant thread in arch-general: https://lists.archlinux.org/pipermail/a … 46038.html

Last edited by GenkiSky (2019-02-10 17:29:03)

Offline

#3 2019-02-10 08:04:31

replabrobin
Member
Registered: 2010-05-06
Posts: 190

Re: atd authentication failures

did your example smtpd file fix things for  your problem?

Edit: I tried exactly the same

auth required pam_unix.so
account required pam_unix.so
password required pam_unix.so
session required pam_unix.so

in  /etc/pam.d/atd and it seems to fix the issue for me. Thanks for the suggestion; I agree that all these services need to provide a pam.d entry.

Last edited by replabrobin (2019-02-10 08:22:25)

Offline

Board footer

Powered by FluxBB