help-cfengine
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: Solaris cron audit problem


From: PAUL WILLIAMSON
Subject: RE: Solaris cron audit problem
Date: Fri, 27 May 2005 11:18:24 -0400

While not the greatest solution to be constantly restarting cron, 
it is a solution I guess I'll have to live with until a better solution

comes along...

...thinking....

Is there some way I can tell cfengine to not restart cron from
cfagent.conf
if there is not a modification to the crontab?  Or, do I just push out

a cfagent.conf without a line to restart cron?

Is there a reserved command to restart cron, or would I need to 
do something like:

make the edits to cron (under editfiles:)
remove the resulting edit file from
/var/spool/cron/crontabs/root_*cfsaved
remove the root.au file from /var/spool/cron/crontabs
restart cron ("cron" restart "/usr/sbin/cron")

This seems like an incredibly ugly way to accomplish a fairly simple
task.
Am I missing some steps, or is this one of those times when it just has
to 
be that way because I'm not using PAM authentication and need to undo 
the audit/security stuff employed by Solaris?

Paul

>>> "Baker, Darryl" <Darryl.Baker@gedas.com> 05/27/05 10:21 AM >>>
I believe the other way around it is to remove the .au files from the
crontab directory and restart cron whenever cfengine makes an edit to
a
crontab file.

_____________________________________________________________________
Darryl Baker
Senior Unix Specialist
gedas USA, Inc.
Operational Services Business Unit
3800 Hamlin Road
Auburn Hills, MI 48326
US
phone   +1-248-754-5341
fax     +1-248-754-6399
Darryl.Baker@gedas.com 
http://www.gedasusa.com 
_____________________________________________________________________

> -----Original Message-----
> From: help-cfengine-bounces+darryl.baker=gedas.com@gnu.org 
> [mailto:help-cfengine-bounces+darryl.baker=gedas.com@gnu.org]On
Behalf
> Of PAUL WILLIAMSON
> Sent: Friday, May 27, 2005 12:29 AM
> To: help-cfengine@gnu.org 
> Subject: Solaris cron audit problem
> 
> 
> More fun...
> 
> I finally have 2.1.14 running for the most part.  When I set 
> cfagent to
> make an entry 
> to the crontab, I get this in my /var/cron/log:
> 
> !cron audit problem. job failed (x/x/x) for user root 
> 
> After doing some googling, I've tracked it down to a combination of 
> Solaris, BMS (audit/security), and openssh.  Apparently my only 
> options are to turn off auditing or making crontab entries via 
> the console.  Neither of which are an option.  Any ideas?
> 
> Switching to linux is sounding better and better...
> I'm not having these problems with those boxes...
> 
> Paul
> 
> 
> 
> _______________________________________________
> Help-cfengine mailing list
> Help-cfengine@gnu.org 
> http://lists.gnu.org/mailman/listinfo/help-cfengine 
> 






reply via email to

[Prev in Thread] Current Thread [Next in Thread]