On Mon, 2011-01-31 at 12:33 +0000, Anne Wilson wrote:
I guess the next step is to take the keychain part out of the script
during tests, even though the documentation says that I must have it
when running under cron.
Which documentation? The manpage for crontab doesn't mention keychain
(it would be wierd if it did). It does say that you can run as a
non-root user by either a) configuring cron.allow/cron.deny or b) using
PAM authentication. However the exact conditions under which it uses one
or the other are not explicit. It may be that Fedora cron always uses
the PAM stuff, it's not at all clear. It wouldn't be hard to check with
a toy script though.