Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #814824

Bug#795296: "You are not allowed to save the configuration" (both root and ordinary user)

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

¡Hola Willi!

El 2017-03-22 a las 19:52 +0100, Willi Mann escribió:
> Am 2017-03-21 um 10:58 schrieb Maximiliano Curia:
>> El 2017-03-20 a las 19:22 +0100, Willi Mann escribió:
>>> the problem still exists. Let me know if you any idea how to track 
>>> this down.

>> Sorry, I can't reproduce the issue here, the message seems to be related 
>> to a rule rejecting the request for your users, (even root?). Do you have a 
>> specific policykit setup?

> I don't have a specific setup. The system runs testing for some years, 
> though. So it could be an upgrade bug. The problem also occurs with root 
> and a clean account I just created for testing.

There is something here, as root policykit doesn't need to talk with the 
agent, so that rules out polkit-kde-agent-1. The issue should be on the 
policykit side.

Just to be sure, how was the root plasma session started?
The changes made as root weren't applied to the /etc/sddm.conf file? (assuming 
that you tested this with the sddm kcm)

>> Do you have the polkit-kde-authentication-agent-1 service running?

> I have such a process running, under the desktop's user uid.

>> What's the result of running: pkexec bash 
>> in a terminal with your user?

> This hangs, i.e. it does not return but also does not produce any 
> output. However, it works fine when I run "pkexec bash" as root. System 
> dbus log during the execution of this command attached.

pkexec bash as root doesn't need to talk with the agent, so it should always 
work.

> method call time=1490208186.877616 sender=:1.73 -> destination=:1.7 serial=9 path=/org/freedesktop/PolicyKit1/Authority; interface=org.freedesktop.PolicyKit1.Authority; member=CheckAuthorization 
>   string "org.freedesktop.policykit.exec" 
>   array [ 
>      dict entry( 
>         string "program" 
>         string "/bin/bash" 
>      ) 
> method call time=1490208186.878006 sender=:1.7 -> destination=org.freedesktop.DBus serial=139 path=/org/freedesktop/DBus; interface=org.freedesktop.DBus; member=GetConnectionUnixUser 
>   string ":1.73" 
> method return time=1490208186.878028 sender=org.freedesktop.DBus -> destination=:1.7 serial=78 reply_serial=139 
>   uint32 0 
> method call time=1490208186.878052 sender=:1.7 -> destination=org.freedesktop.DBus serial=140 path=/org/freedesktop/DBus; interface=org.freedesktop.DBus; member=GetConnectionUnixProcessID 
>   string ":1.73" 
> method return time=1490208186.878076 sender=org.freedesktop.DBus -> destination=:1.7 serial=79 reply_serial=140 
>   uint32 2828 
> method call time=1490208186.878100 sender=:1.7 -> destination=:1.42 serial=141 path=/org/kde/PolicyKit1/AuthenticationAgent; interface=org.freedesktop.PolicyKit1.AuthenticationAgent; member=BeginAuthentication 
>   string "org.freedesktop.policykit.exec" 
>   string "Authentication is needed to run `/bin/bash' as the super user" 
>   string "" 
>   array [ 
>      dict entry( 
>         string "polkit.caller-pid" 
>         string "2828" 
>      ) 
> signal time=1490208211.280956 sender=:1.28 -> destination=(null destination) serial=41 path=/org/freedesktop/ConsoleKit/Session4; interface=org.freedesktop.ConsoleKit.Session; member=IdleHintChanged 
>   boolean true

After these the agent request an EnumerateActions and ends up showing the 
window, in my test system. This may indicate that the agent is in a 
non-responsive state, which somewhat contradicts what's indicated a couple of 
paragraphs before. Was this the complete output?

It might be useful to attach an strace to the agent with:
 sudo strace -vf -p $(pidof polkit-kde-authentication-agent-1) | tee /tmp/polkit-agent.log

or something like that. The generated file would be quite large, with a lot of 
noise, so it might be better not to send it to a pastebin like 
https://paste.debian.net.

Happy hacking,
-- 
"If you have too many special cases, you are doing it wrong." -- Craig Zarouni
 Saludos /\/\ /\ >< `/

Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Bug#795296: "You are not allowed to save the configuration" (both root and ordinary user) Willi Mann <willi@debian.org> - 2017-03-20 19:40 +0100
  Bug#795296: "You are not allowed to save the configuration" (both root and ordinary user) Maximiliano Curia <maxy@gnuservers.com.ar> - 2017-03-21 11:10 +0100
    Bug#795296: "You are not allowed to save the configuration" (both root and ordinary user) Maximiliano Curia <maxy@debian.org> - 2017-03-22 22:20 +0100
      Bug#795296: "You are not allowed to save the configuration" (both root and ordinary user) Willi Mann <willi@debian.org> - 2017-03-23 18:50 +0100
        Bug#795296: "You are not allowed to save the configuration" (both root and ordinary user) Maximiliano Curia <maxy@debian.org> - 2017-03-31 18:30 +0200
          Bug#795296: "You are not allowed to save the configuration" (both root and ordinary user) Willi Mann <willi@debian.org> - 2017-03-31 21:30 +0200
            Bug#795296: "You are not allowed to save the configuration" (both root and ordinary user) Maximiliano Curia <maxy@debian.org> - 2017-04-06 19:30 +0200
              Bug#795296: "You are not allowed to save the configuration" (both root and ordinary user) Willi Mann <willi@debian.org> - 2017-04-20 20:20 +0200

csiph-web