crontab pam broken

[Elan Ruusamäe]

$ crontab -l
You (glen) are not allowed to access to (crontab) because of pam 
configuration.

this fails becase in syslog:
Oct 29 14:51:19 glen crontab[16154]: pam_unix(crond:account): 
unix_chkpwd abnormal exit: 11
Oct 29 14:51:19 glen crontab[16154]: (glen) PAM ERROR (Authentication 
failure)

any ideas?

Tue Aug  4 20:34:35 2015 cronie-1.5.0-1.x86_64
Mon May 25 11:04:54 2015 pam-1.1.8-8.x86_64
Mon May 25 11:04:54 2015 pam-libs-1.1.8-8.x86_64

# cat /etc/pam.d/crond
#%PAM-1.0
auth            include         system-auth
account         include         system-auth
session         include         system-auth
#session                required        pam_loginuid.so


# cat /etc/pam.d/system-auth
#%PAM-1.0
auth            required        pam_listfile.so item=user sense=deny 
file=/etc/security/blacklist onerr=succeed
auth            required        pam_env.so
auth            required        pam_tally.so deny=0 
file=/var/log/faillog onerr=succeed
auth            required        pam_unix.so try_first_pass

account         required        pam_tally.so file=/var/log/faillog 
onerr=succeed
account         required        pam_time.so
account         required        pam_unix.so

#password       [success=1 ignore=reset abort=die default=bad] 
pam_pwgen.so upper=1 digit=1
password        required        pam_cracklib.so try_first_pass difok=2 
minlen=8 dcredit=2 ocredit=2 retry=3
password        required        pam_unix.so try_first_pass sha512 shadow 
use_authtok
#password       required        pam_exec.so failok seteuid /usr/bin/make 
-C /var/db
#password       required        pam_exec.so failok seteuid /usr/bin/make 
-C /var/yp

session         required        pam_env.so
session         optional        pam_keyinit.so revoke
session         required        pam_limits.so
-session        optional        pam_systemd.so
session         [success=1 default=ignore]      pam_succeed_if.so 
service in crond quiet use_uid
session         required        pam_mkhomedir.so skel=/etc/skel
session         required        pam_unix.so



-- 
glen