Bug 989201

Summary: PAM issue prevents atd sending mail
Product: [Fedora] Fedora Reporter: Paul Howarth <paul>
Component: atAssignee: Marcela Mašláňová <mmaslano>
Status: CLOSED CURRENTRELEASE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 19CC: a.kriegl, bnt19231, bugzilla-2004, deanhunter, gary, Gecko8211, goeran, mmaslano, slawomir
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: at-3.1.13-13.fc19 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-12-05 11:44:57 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Paul Howarth 2013-07-28 09:44:20 UTC
Since updating to F-19, my at jobs have been unable to send mail. This appears to be a PAM issue, as evidenced by these journal entries:

# journalctl -b | grep atd
Jul 27 00:10:00 zion.intra.city-fan.org atd[23419]: pam_unix(atd:session): session opened for user paul by (uid=0)
Jul 27 00:16:28 zion.intra.city-fan.org atd[23419]: pam_loginuid(atd:session): set_loginuid failed
Jul 27 00:16:28 zion.intra.city-fan.org atd[23419]: pam_unix(atd:session): session opened for user paul by (uid=0)
Jul 27 00:16:28 zion.intra.city-fan.org atd[23419]: Cannot make/remove an entry for the specified session

My at job ran at 00:10:00, completed successfully, and then at 00:16:28 tried to mail the output to me but never sent anything.

Last night I tried commenting out the pam_loginuid line from /etc/pam.d/atd and atd was subsequently able to mail me its output.

Comment 1 Göran Uddeborg 2013-08-16 22:06:15 UTC
I don't see those messages in my log, but your workaround helped for me too.  (Thanks for the tip!)

Comment 2 Dean Hunter 2013-10-28 17:33:40 UTC
Thank you for the work-around. It works for me. Do you have any idea what I loose by commenting pam_loginuid.so?

Comment 3 Marcela Mašláňová 2013-11-12 11:47:20 UTC
*** Bug 1005323 has been marked as a duplicate of this bug. ***

Comment 4 Marcela Mašláňová 2013-11-12 11:48:31 UTC
Thanks Paul. I had the same problem with cronie. This is a correct fix. I'll fix it in F20 and F19 branches.

Comment 5 Marcela Mašláňová 2013-12-05 11:44:57 UTC
Please, add the pam_loginuid.so back. It can solve some cases, but the configuration is not safe without it. PAM authentication in code of at is now improved and working properly.

Comment 6 Fedora Update System 2013-12-05 11:47:41 UTC
at-3.1.13-13.fc19 has been submitted as an update for Fedora 19.
https://admin.fedoraproject.org/updates/at-3.1.13-13.fc19

Comment 7 Fedora Update System 2013-12-05 11:48:50 UTC
at-3.1.13-14.fc20 has been submitted as an update for Fedora 20.
https://admin.fedoraproject.org/updates/at-3.1.13-14.fc20

Comment 8 Paul Howarth 2013-12-05 12:34:40 UTC
at-3.1.13-13.fc19 works for me.

Comment 9 Marcela Mašláňová 2013-12-05 12:55:23 UTC
(In reply to Paul Howarth from comment #8)
> at-3.1.13-13.fc19 works for me.

Thanks, I tested it only on my laptop, so I'm glad it's working for everyone.

Comment 10 Fedora Update System 2013-12-27 05:57:23 UTC
at-3.1.13-14.fc20 has been pushed to the Fedora 20 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 11 Fedora Update System 2014-01-01 03:32:12 UTC
at-3.1.13-13.fc19 has been pushed to the Fedora 19 stable repository.  If problems still persist, please make note of it in this bug report.