From owner-freebsd-questions@FreeBSD.ORG Tue Apr 24 02:51:01 2012 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 86817106564A for ; Tue, 24 Apr 2012 02:51:01 +0000 (UTC) (envelope-from tjg@tgustafson.com) Received: from mail-lpp01m010-f54.google.com (mail-lpp01m010-f54.google.com [209.85.215.54]) by mx1.freebsd.org (Postfix) with ESMTP id 0A0938FC08 for ; Tue, 24 Apr 2012 02:51:00 +0000 (UTC) Received: by lagv3 with SMTP id v3so179242lag.13 for ; Mon, 23 Apr 2012 19:50:59 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:x-originating-ip:date:message-id:subject:from:to :content-type:x-gm-message-state; bh=LRef+k3FhA5bKF4jC8WwecSl5Tj39dD+f5wTl4RszI0=; b=mPniWXZhqYVL2DSfdcTSmiCJRWyQWObU4HaUUrbzOp+syzI4AGF83YZGq2MrlQ8jGY EJj6jB/vIJqyx3od8HXALqkPDLl04APKvdUszR1FXF+41QM74HJy++n/aVmI8hTfgMvi TPVGr+TIs12sDkXN1GAALFUecRajNaPLXtyh19zuDsx3YDv5ht121vxYVFpyBQgC6Q55 ppq9rCEnXk9xXkN6nBNJy6lYGDDJnMpN0rC2Ow0156EXfaQYbelkzrEFi5TSTQ2fP5p/ IcOJ9H5SlDamPJ8I/uhL17d2H28w+iX6B2u4upwSyGeI1E/1CcEdF3nAPDSpp39DvyLK c5UQ== MIME-Version: 1.0 Received: by 10.152.132.166 with SMTP id ov6mr18957067lab.35.1335235859732; Mon, 23 Apr 2012 19:50:59 -0700 (PDT) Received: by 10.152.18.201 with HTTP; Mon, 23 Apr 2012 19:50:59 -0700 (PDT) X-Originating-IP: [50.136.209.89] Date: Mon, 23 Apr 2012 19:50:59 -0700 Message-ID: From: Tim Gustafson To: freebsd-questions@freebsd.org Content-Type: text/plain; charset=ISO-8859-1 X-Gm-Message-State: ALoCoQmP3bwu2TOcjaUt3Ghv5CenOitl3jtKpDFDrII2ftyMwhB2t6TWAppybmD1boEtOJibOY8N Subject: Cron Problems X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 24 Apr 2012 02:51:01 -0000 I've recently installed a FreeBSD 9.0 jail server, and inside each of my jails I am getting the following errors in my log about every 5 minutes: cron[7635]: NSSWITCH(_nsdispatch): ldap, group, setgrent, not found, and no fallback provided cron[7635]: NSSWITCH(_nsdispatch): ldap, group, getgrent_r, not found, and no fallback provided cron[7635]: NSSWITCH(_nsdispatch): ldap, group, endgrent, not found, and no fallback provided cron[7635]: NSSWITCH(_nsdispatch): ldap, passwd, endpwent, not found, and no fallback provided /usr/sbin/cron[7673]: (CRON) WARNING (madvise() failed) I'm using nss_ldap and pam_ldap on these systems, so I suspect and error in my /etc/pam.d configuration or my nsswitch.conf configuration. I've added some configuration to /etc/pam.d/sshd and /etc/pam.d/other but have left the other files unmolested. Now, this seems like an nsswitch problem, but my nsswitch.conf is fairly straightforward: group: files ldap hosts: files dns networks: files passwd: files ldap shells: files services: files protocols: files rpc: files I'm able to get user ID information without a problem using "id" or "finger". Authentication is working. LDAP groups are working. Pretty much everything seems like it ought to work, except for those error messages. I don't think this is a PAM issue, but just in case, here's my /etc/pam.d/sshd: auth sufficient /usr/local/lib/pam_ldap.so auth required pam_unix.so account required pam_nologin.so account required pam_login_access.so account required pam_unix.so session required pam_permit.so password required pam_unix.so no_warn try_first_pass And here is /etc/pam.d/other: auth sufficient /usr/local/lib/pam_ldap.so auth required pam_unix.so no_warn try_first_pass account required pam_nologin.so account required pam_login_access.so account required pam_unix.so session required pam_permit.so password required pam_permit.so I note that there is an /etc/pam.d/cron but it's not clear to me what I might add to this file, as it is quite different than the others: account required pam_nologin.so account required pam_unix.so So, what am I missing? -- Tim Gustafson tjg@tgustafson.com http://tgustafson.com/