Bootstrap script can not be updated using webUI when PAM is enabled

# cat /etc/pam.d/susemanager
#%PAM-1.0
auth     include        common-auth
account  include        common-account
password include        common-password
session  include        common-session

# cat /etc/rhn/rhn.conf
pam_auth_service = susemanager

/var/log/messages
2022-02-07T14:22:27.027172+00:00 systemhostname sudo: pam_access(sudo:account): access denied for user `tomcat' from `'
2022-02-07T14:22:27.030401+00:00 systemhostname sudo: pam_sss(sudo:account): Access denied for user tomcat: 10 (User not known to the underlying authentication module)
2022-02-07T14:22:27.030660+00:00 systemhostname sudo: tomcat : PAM account management error: Permission denied ; PWD=/usr/share/tomcat ; USER=root ; COMMAND=/usr/bin/rhn-bootstrap --hostname=systemhostname --ssl-cert=/srv/www/htdocs/pub/rhn-org-trusted-ssl-cert-1.0-1.noarch.rpm

/var/log/rhn/rhn_web_ui.log
2022-02-07 14:19:23,454 [ajp-nio-0:0:0:0:0:0:0:1-8009-exec-20] ERROR com.redhat.rhn.manager.satellite.SystemCommandExecutor - Error encountered executing (args=[/usr/bin/sudo, /usr/bin/rhn-bootstrap, --hostname=systemhostname, --ssl-cert=/srv/www/htdocs/pub/rhn-org-trusted-ssl-cert-1.0-1.noarch.rpm])
2022-02-07 14:19:23,454 [ajp-nio-0:0:0:0:0:0:0:1-8009-exec-20] ERROR com.redhat.rhn.manager.satellite.SystemCommandExecutor - Error message from process: sudo: PAM account management error: Permission denied sudo: a password is required

The bootstrap script can be updated correctly by running `mgr-bootstrap` on top of SUSE Manager Server.

Add the following in `/etc/security/access.conf` to grant access to the "tomcat" user:

+:tomcat:ALL

It might be also needed to create a sudoers drop-in file. Add the following to `/etc/sudoers.d/01_tomcat`

tomcat ALL = NOPASSWD: /usr/bin/rhn-bootstrap

+:user00,user01,user02:ALL
+:user03:LOCAL
-:ALL:ALL

• all the users in the first line starting with '+' are allowed in
• user "user03" is allowed in but only from localhost
• ALL other users are NOT allowed