On 14/07/2015 16:14, Gary R. Schmidt wrote:

On 14/07/2015 12:25 AM, Casper H.S. Dik wrote:
[SNIP]

We ship the system with root as a role and still ship it with
crontabs for root.

Let's wait until the OP responds what didn't work for him,

Double checked /etc/cron.d/cron.deny:
$ cat /etc/cron.d/cron.deny
daemon
bin
nuucp
$

There is no /etc/cron.d/cron.allow

$ pfexec crontab -e root
Warning - Invalid account: 'root' not allowed to execute cronjobs
crontab: The audit context for your shell has not been set.

Bringing an old thread back to life ....
As it happens I hit this on Thursday, S11.4

I was convinced it was hardening.

Until I realised 2 servers had the issue on the same day.

Looked at /etc/shadow and noticed that there was a 35 day expiry st root:<passwd>:19578::::35::811476


passwd -x didn't make any difference, so I edited shadow to remove the
last change and expire entries

It all worked again

These were 2 T8-1s, fresh (factory) install + SRU59

I have 2 more to setup next week, I'll look at the shadow file carefully ...

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)