not allowed to access to crontab because of pam configuration

not allowed to access to crontab because of pam configuration

如果运行crontab如遇下面这样的错误：
$ crontab -l
you (zhangsan) are not allowed to access to (crontab) because of pam configuration.


原因可能是因为用户zhangsan密码过期了。当尝试以密码登录时，会报提示需要立即修改密码：
$ su - zhangsan
password:
you are required to change your password immediately (password aged)
changing password for zhangsan.
(current) unix password:


如果正好是hadoop集群，由于需要免密码登录，密码不能过期。
可以使用命名chage查看实际情况，比如（请以root用户运行）：
#chage -l zhangsan
last password change : nov 23, 2015
password expires : feb 21, 2016
password inactive : never
account expires : never
minimum number of days between password change : 0
maximum number of days between password change : 90
number of days of warning before password expires : 7


从上可以看到：每90天需要修改一次密码，密码到期前7天会告警。
为了让密码永久有效，可这样设置一下：
chage -m 99999 zhangsan


再次查看：
#chage -l zhangsan
last password change : nov 23, 2015
password expires : never
password inactive : never
account expires : never
minimum number of days between password change : 0
maximum number of days between password change : 99999
number of days of warning before password expires : 7