From: Seth Vidal <skvidal(a)fedoraproject.org&gt; I think but am not positive that it is causing this log error: restorecond: set context /var/db/shadow.db->system_u:object_r:shadow_t:s0 failed:'Permission denied' due to fasClient running from cron at the same time as from puppet. --- modules/fas/manifests/init.pp | 9 --------- 1 files changed, 0 insertions(+), 9 deletions(-) diff --git a/modules/fas/manifests/init.pp b/modules/fas/manifests/init.pp index f1eb7ac..64676bb 100644 --- a/modules/fas/manifests/init.pp +++ b/modules/fas/manifests/init.pp @@ -66,15 +66,6 @@ class fas::client { type => "user_home_dir_t", } - exec { "make-accounts": - command => "/usr/bin/fasClient -e; /usr/bin/fasClient -i", - timeout => 90, - creates => "/var/db/shadow.db", - require => [ - File["/etc/fas.conf"], - Package["fas-clients"], - ], - } } # May want to merge this into fas::client in the future if we want yubikey