[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: Solaris cron audit problem
From: |
PAUL WILLIAMSON |
Subject: |
RE: Solaris cron audit problem |
Date: |
Fri, 27 May 2005 11:18:24 -0400 |
While not the greatest solution to be constantly restarting cron,
it is a solution I guess I'll have to live with until a better solution
comes along...
...thinking....
Is there some way I can tell cfengine to not restart cron from
cfagent.conf
if there is not a modification to the crontab? Or, do I just push out
a cfagent.conf without a line to restart cron?
Is there a reserved command to restart cron, or would I need to
do something like:
make the edits to cron (under editfiles:)
remove the resulting edit file from
/var/spool/cron/crontabs/root_*cfsaved
remove the root.au file from /var/spool/cron/crontabs
restart cron ("cron" restart "/usr/sbin/cron")
This seems like an incredibly ugly way to accomplish a fairly simple
task.
Am I missing some steps, or is this one of those times when it just has
to
be that way because I'm not using PAM authentication and need to undo
the audit/security stuff employed by Solaris?
Paul
>>> "Baker, Darryl" <Darryl.Baker@gedas.com> 05/27/05 10:21 AM >>>
I believe the other way around it is to remove the .au files from the
crontab directory and restart cron whenever cfengine makes an edit to
a
crontab file.
_____________________________________________________________________
Darryl Baker
Senior Unix Specialist
gedas USA, Inc.
Operational Services Business Unit
3800 Hamlin Road
Auburn Hills, MI 48326
US
phone +1-248-754-5341
fax +1-248-754-6399
Darryl.Baker@gedas.com
http://www.gedasusa.com
_____________________________________________________________________
> -----Original Message-----
> From: help-cfengine-bounces+darryl.baker=gedas.com@gnu.org
> [mailto:help-cfengine-bounces+darryl.baker=gedas.com@gnu.org]On
Behalf
> Of PAUL WILLIAMSON
> Sent: Friday, May 27, 2005 12:29 AM
> To: help-cfengine@gnu.org
> Subject: Solaris cron audit problem
>
>
> More fun...
>
> I finally have 2.1.14 running for the most part. When I set
> cfagent to
> make an entry
> to the crontab, I get this in my /var/cron/log:
>
> !cron audit problem. job failed (x/x/x) for user root
>
> After doing some googling, I've tracked it down to a combination of
> Solaris, BMS (audit/security), and openssh. Apparently my only
> options are to turn off auditing or making crontab entries via
> the console. Neither of which are an option. Any ideas?
>
> Switching to linux is sounding better and better...
> I'm not having these problems with those boxes...
>
> Paul
>
>
>
> _______________________________________________
> Help-cfengine mailing list
> Help-cfengine@gnu.org
> http://lists.gnu.org/mailman/listinfo/help-cfengine
>