Bug 812682 - atd's pam.d file does not permit normal users to do at or atq
Summary: atd's pam.d file does not permit normal users to do at or atq
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: at
Version: 17
Hardware: x86_64
OS: Linux
unspecified
high
Target Milestone: ---
Assignee: Marcela Mašláňová
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
: 812151 (view as bug list)
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2012-04-15 23:08 UTC by Arne Woerner
Modified: 2012-05-04 16:24 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2012-05-04 16:24:51 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)
pam for atd before the workaround (272 bytes, text/plain)
2012-04-15 23:08 UTC, Arne Woerner
no flags Details

Description Arne Woerner 2012-04-15 23:08:55 UTC
Created attachment 577593 [details]
pam for atd before the workaround

Description of problem:
After my upgrade (via preupgrade) from fc16 to fc17alpha i was unable to issue at jobs or to look at the at job queue as normal user (as root it worked fine)...
after i copied /etc/pam.d/su to /etc/pam.d/atd it works fine again...

Version-Release number of selected component (if applicable):
at.x86_64 3.1.13-7.fc17

How reproducible:
always

Steps to Reproduce:
1. login as normal user
2. type atq or at
  
Actual results:
it said "Terminated"

Expected results:
it should file an at job or show the at job queue...

Additional info:
i hope my workaround is no bad idea... :-)

Comment 1 Arne Woerner 2012-04-17 08:59:07 UTC
with
# cp /etc/pam.d/preupgrade-cli /etc/pam.d/atd
it works even better
(e. g. in shell scripts started by atd...)...

Comment 2 Marcela Mašláňová 2012-04-17 14:31:02 UTC
You are right. I can reproduce it as regular user, not as a root. Something wrong with pam setting.

Comment 3 Marcela Mašláňová 2012-04-17 14:44:52 UTC
*** Bug 812151 has been marked as a duplicate of this bug. ***

Comment 4 Marcela Mašláňová 2012-04-18 12:54:21 UTC
The problem is in pam in at daemon. The change of pam setting is not wise.

The problem with pam is visible with systemd, which change some default. Now is after pam_close_session closed all jobs, which will terminate all at jobs. I need to fix pam sesssion in at.

Comment 5 Fedora Update System 2012-04-20 08:48:19 UTC
at-3.1.13-8.fc17 has been submitted as an update for Fedora 17.
https://admin.fedoraproject.org/updates/at-3.1.13-8.fc17

Comment 6 Arne Woerner 2012-04-24 22:40:39 UTC
yay :-)

Comment 7 Marcela Mašláňová 2012-04-25 11:32:32 UTC
+1 in update system would be better ;-)

Comment 8 Fedora Update System 2012-04-26 20:07:10 UTC
at-3.1.13-8.fc17 has been pushed to the Fedora 17 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 9 Arne Woerner 2012-05-04 16:24:51 UTC
i say it is fixed...


Note You need to log in before you can comment on or make changes to this bug.