Bug 812682

Summary: atd's pam.d file does not permit normal users to do at or atq
Product: [Fedora] Fedora Reporter: Arne Woerner <arne_woerner>
Component: atAssignee: Marcela Mašláňová <mmaslano>
Status: CLOSED CURRENTRELEASE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: high Docs Contact:
Priority: unspecified    
Version: 17CC: goeran, mmaslano
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-05-04 16:24:51 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
pam for atd before the workaround none

Description Arne Woerner 2012-04-15 23:08:55 UTC
Created attachment 577593 [details]
pam for atd before the workaround

Description of problem:
After my upgrade (via preupgrade) from fc16 to fc17alpha i was unable to issue at jobs or to look at the at job queue as normal user (as root it worked fine)...
after i copied /etc/pam.d/su to /etc/pam.d/atd it works fine again...

Version-Release number of selected component (if applicable):
at.x86_64 3.1.13-7.fc17

How reproducible:
always

Steps to Reproduce:
1. login as normal user
2. type atq or at
  
Actual results:
it said "Terminated"

Expected results:
it should file an at job or show the at job queue...

Additional info:
i hope my workaround is no bad idea... :-)

Comment 1 Arne Woerner 2012-04-17 08:59:07 UTC
with
# cp /etc/pam.d/preupgrade-cli /etc/pam.d/atd
it works even better
(e. g. in shell scripts started by atd...)...

Comment 2 Marcela Mašláňová 2012-04-17 14:31:02 UTC
You are right. I can reproduce it as regular user, not as a root. Something wrong with pam setting.

Comment 3 Marcela Mašláňová 2012-04-17 14:44:52 UTC
*** Bug 812151 has been marked as a duplicate of this bug. ***

Comment 4 Marcela Mašláňová 2012-04-18 12:54:21 UTC
The problem is in pam in at daemon. The change of pam setting is not wise.

The problem with pam is visible with systemd, which change some default. Now is after pam_close_session closed all jobs, which will terminate all at jobs. I need to fix pam sesssion in at.

Comment 5 Fedora Update System 2012-04-20 08:48:19 UTC
at-3.1.13-8.fc17 has been submitted as an update for Fedora 17.
https://admin.fedoraproject.org/updates/at-3.1.13-8.fc17

Comment 6 Arne Woerner 2012-04-24 22:40:39 UTC
yay :-)

Comment 7 Marcela Mašláňová 2012-04-25 11:32:32 UTC
+1 in update system would be better ;-)

Comment 8 Fedora Update System 2012-04-26 20:07:10 UTC
at-3.1.13-8.fc17 has been pushed to the Fedora 17 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 9 Arne Woerner 2012-05-04 16:24:51 UTC
i say it is fixed...