Question on pam_access cron configuration

[Dominik Klein <dominik.klein@googlemail.com>]

Hi

I included pam_access in common-account in order to manage access to
my machines.

Now, cronjobs running as www-data or nobody cannot run because there
is no entry in the access.conf - and I really don't want an entry for
each cronjob.

My approach on fixing this was to exclude common-account from
/etc/pam.d/cron, but I still get

CRON[pid]: pam_access(cron:account) access diened for user "nobody" from "cron"

What's the correct (debian) way to deal with this situation?

Regards
Dominik