OpenSSH, BSM enabled, and crontab corruption Solaris 8 - HELP

We have BSM enabled on our Solaris 8 boxes. We have OpenSSH version 3.8.1p1, OpenSSL 0.9.7b.

When the crontab file is edited, "crontab -e" and saved using the SSH login, the crontab auditing feature will not allow cron jobs to run. Error messages received in the /var/cron/log give error for the audit.

We are locked down, ssh is the only way to get in (telnet, rsh, rlogin are all disabled by security). Turning off BSM is not an option, nor is enabling telnet ( we used it to fix all the issues and then turned it back off).

Is there a version of Sun ssh that will work on a Sol8 box with BSM enabled, or is there a patch to make BSM and SSH work together?

Thanks.

[697 byte] By [mlhardwicke] at [2007-11-26 10:56:51]
# 1
Hello,we have the same issues on our servers. To edit the crontab, we login via the lan console and edit the cron from there. Its just a work around untill the problem is solved.Regards
Marro at 2007-7-7 3:10:09 > top of Java-index,General,Sys Admin Best Practices...
# 2

EUREKA!!!!

I found out that if you backout patch number 109007-22 and 109007-21 and it will fix the issue.

Do an audit -n

crontab -e and save the file and the problem is gone.

The latest patch that still works is 109007-18 with BSM enabled and OpenSSH version 3.8.1p1

Message was edited by:

mlhardwicke

mlhardwicke at 2007-7-7 3:10:09 > top of Java-index,General,Sys Admin Best Practices...