[opensuse] I'm denied access to network edit.
Hi, Using XFCE on 42.2. When I right click on network manager, edit connection, then select a connection to edit (wireless), I get a window that doesn't fill up, then disappears, then I get another little window that says: Error initializing editor insuficient privileges It does not ask for root's password as it should. -- Cheers / Saludos, Carlos E. R. (from 42.2 x86_64 "Malachite" (Minas Tirith))
25.03.2017 05:47, Carlos E. R. пишет:
Hi,
Using XFCE on 42.2. When I right click on network manager, edit connection, then select a connection to edit (wireless), I get a window that doesn't fill up, then disappears, then I get another little window that says:
Error initializing editor insuficient privileges
It does not ask for root's password as it should.
Also happens when you try to save new connection with "All users may connect to this network" enabled or actually running any other NM toosl (nmcli, nmtui). You need polkit authentication agent running as part of your login session. XFCE should use gnome-polkit (/usr/lib/polkit-gnome-authentication-agent-1). If you start it, you will get authentication request. Related bug reports https://bbs.archlinux.org/viewtopic.php?id=201439 https://bugs.freedesktop.org/show_bug.cgi?id=97445 Did it work for you in the past? The first thread indicates that autostart desktop file was dropped by gnome-polkit, so XFCE needs to make sure it starts it.
On 2017-03-25 07:50, Andrei Borzenkov wrote:
Also happens when you try to save new connection with "All users may connect to this network" enabled or actually running any other NM toosl (nmcli, nmtui).
I'm not familiar with nmcli, but it appears to work: cer@minas-tirith:~> nmcli g STATE CONNECTIVITY WIFI-HW WIFI WWAN-HW WWAN connected full enabled enabled enabled disabled cer@minas-tirith:~> nmcli d DEVICE TYPE STATE CONNECTION wlan0 wifi connected Minhiriath2 eth0 ethernet unavailable -- lo loopback unmanaged -- cer@minas-tirith:~> nmcli n enabled cer@minas-tirith:~> nmcli r WIFI-HW WIFI WWAN-HW WWAN enabled enabled enabled disabled cer@minas-tirith:~> nmcli a nmcli successfully registered as a NetworkManager's secret agent. nmcli successfully registered as a polkit agent. [hangs here] ^C Error: nmcli terminated by signal Interrupt (2)
You need polkit authentication agent running as part of your login session. XFCE should use gnome-polkit (/usr/lib/polkit-gnome-authentication-agent-1). If you start it, you will get authentication request.
cer@minas-tirith:~> ps afxu | grep polkit cer 951 0.0 0.0 10544 1640 pts/23 S+ 14:14 0:00 | | \_ grep --color=auto polkit polkitd 3682 0.0 0.3 529800 14292 ? Ssl Mar14 1:56 /usr/lib/polkit-1/polkitd --no-debug It is not that one? I see in Settings/Session and Startup, tab Application autostart, a line: [ ] PolicyKit Authentication Agent (PolicyKit Authentication Agent) So I'll mark that one and restart the session. [...] YES! Thank you, good catch! nmcli changed: cer@minas-tirith:~/Compilaciones> nmcli a nmcli successfully registered as a NetworkManager's secret agent. ** (process:3408): WARNING **: Unable to register authentication agent: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: An authentication agent already exists for the given subject ^C Error: nmcli terminated by signal Interrupt (2) cer@minas-tirith:~/Compilaciones>
Related bug reports
https://bbs.archlinux.org/viewtopic.php?id=201439 https://bugs.freedesktop.org/show_bug.cgi?id=97445
Did it work for you in the past? The first thread indicates that autostart desktop file was dropped by gnome-polkit, so XFCE needs to make sure it starts it.
Yes, sure it did work. I created those network configs on XFCE, possible on 13.1 :-) If there is no bug report on our bugzilla I can create one. Unless a new install/user works (my machine is upgraded from 13.1) I'll see if I can test a new user. -- Cheers / Saludos, Carlos E. R. (from 42.2 x86_64 "Malachite" (Minas Tirith))
25.03.2017 16:39, Carlos E. R. пишет:
It is not that one?
I see in Settings/Session and Startup, tab Application autostart, a line: [ ] PolicyKit Authentication Agent (PolicyKit Authentication Agent)
Yes, it is this one, except I do not see it in my case. As I mentioned, gnome-polkit package does not come with desktop file at all; I do not know where your menu entry comes from. May be it is left from earlier openSUSE releases. ...
If there is no bug report on our bugzilla I can create one. Unless a new install/user works (my machine is upgraded from 13.1) I'll see if I can test a new user.
I have Leap 42.2 which is updated from Leap 42.1 and neither is agent auto-started nor do I even have entry for it in XFCE settings.
On 2017-03-25 20:47, Andrei Borzenkov wrote:
25.03.2017 16:39, Carlos E. R. пишет:
It is not that one?
I see in Settings/Session and Startup, tab Application autostart, a line: [ ] PolicyKit Authentication Agent (PolicyKit Authentication Agent)
Yes, it is this one, except I do not see it in my case. As I mentioned, gnome-polkit package does not come with desktop file at all; I do not know where your menu entry comes from. May be it is left from earlier openSUSE releases.
root 3669 0.0 0.1 342012 4108 ? SLl Mar14 0:00 /usr/sbin/lightdm root 1566 1.2 2.2 397064 90444 tty7 Ssl+ 14:26 4:59 \_ /usr/bin/X :0 -seat seat0 -auth /run/lightdm/root/:0 -nolisten tcp root 1597 0.0 0.1 246392 6416 ? Sl 14:26 0:00 \_ lightdm --session-child 12 19 cer 1616 0.0 0.0 10748 792 ? Ss 14:26 0:00 \_ /usr/bin/ck-launch-session /usr/bin/dbus-launch --sh-syntax -- cer 1687 0.0 0.0 13148 2800 ? S 14:26 0:00 \_ /bin/sh /etc/xdg/xfce4/xinitrc -- /etc/X11/xinit/xserverrc cer 1692 0.0 0.0 13308 208 ? Ss 14:26 0:00 \_ /usr/bin/ssh-agent /usr/bin/gpg-agent --sh --daemon -- cer 1693 0.0 0.0 17800 2148 ? Ss 14:26 0:00 \_ /usr/bin/gpg-agent --sh --daemon --keep-display --writ cer 1704 0.0 0.6 369724 25480 ? Sl 14:26 0:01 \_ xfce4-session cer 1714 0.1 0.7 453792 29004 ? Sl 14:26 0:45 \_ xfwm4 --display :0.0 --sm-client-id 2bd314c58-7680 cer 1717 0.1 1.0 654900 40640 ? Sl 14:26 0:30 \_ xfce4-panel --display :0.0 --sm-client-id 26e9b32b ... cer 1723 0.0 1.3 576684 52088 ? Sl 14:26 0:04 \_ xfdesktop --display :0.0 --sm-client-id 2b4a5ec57- cer 1736 0.2 0.6 269332 25780 ? S 14:26 1:01 \_ gkrellm --sm-client-id 21fa84288-4a61-4406-8d1e-5f cer 1737 0.0 1.1 726852 43796 ? Sl 14:26 0:05 \_ /usr/lib64/libexec/kdeconnectd -session 24ed46f96- cer 1738 0.0 0.9 691996 38980 ? Rl 14:26 0:10 \_ xfce4-terminal --geometry=138x24 --display :0.0 -- ... cer 2007 0.0 1.3 822216 55020 ? Sl 14:26 0:01 \_ /usr/lib64/libexec/polkit-kde-authentication-agent ... root 3676 0.0 0.0 285180 3376 ? Ssl Mar14 0:03 /usr/lib/accounts-daemon polkitd 3682 0.0 0.4 533376 17908 ? Ssl Mar14 2:00 /usr/lib/polkit-1/polkitd --no-debug It is polkit-kde-authentication-agent !! I don't see anything else running. Although I have this installed: cer@minas-tirith:~> rpm -qf /usr/lib/polkit-gnome-authentication-agent-1 polkit-gnome-0.105-13.1.x86_64 If I click on edit a connection and stop on the password prompt, I get this list: cer@minas-tirith:~> ps afxu | grep polkit cer 11761 0.0 0.0 10544 1556 pts/21 S+ 21:22 0:00 | | \_ grep --color=auto polkit cer 2007 0.0 1.5 822904 60320 ? Sl 14:26 0:01 \_ /usr/lib64/libexec/polkit-kde-authentication-agent-1 root 11757 0.1 0.1 88444 5240 ? S 21:22 0:00 | \_ /usr/lib/polkit-1/polkit-agent-helper-1 root polkitd 3682 0.0 0.4 531328 15900 ? Ssl Mar14 2:00 /usr/lib/polkit-1/polkitd --no-debug cer@minas-tirith:~> -- Cheers / Saludos, Carlos E. R. (from 42.2 x86_64 "Malachite" (Minas Tirith))
25.03.2017 23:25, Carlos E. R. пишет:
On 2017-03-25 20:47, Andrei Borzenkov wrote:
25.03.2017 16:39, Carlos E. R. пишет:
It is not that one?
I see in Settings/Session and Startup, tab Application autostart, a line: [ ] PolicyKit Authentication Agent (PolicyKit Authentication Agent)
Yes, it is this one, except I do not see it in my case. As I mentioned, gnome-polkit package does not come with desktop file at all; I do not know where your menu entry comes from. May be it is left from earlier openSUSE releases.
...
It is polkit-kde-authentication-agent !!
Well, it explains it; but now I'm extremely confused where polkit-gnome comes from in the first place. I do not see anything that requires, recommends or suggests it. It apparently was part of initial installation of 42.1 if I correctly interpret zypper history file. Yet another case of magic performed by installer that cannot be replaced by using patterns after initial installation it seems. So yes, bug report is definitely in order.
On 2017-03-25 21:56, Andrei Borzenkov wrote:
25.03.2017 23:25, Carlos E. R. пишет:
On 2017-03-25 20:47, Andrei Borzenkov wrote:
25.03.2017 16:39, Carlos E. R. пишет:
It is not that one?
I see in Settings/Session and Startup, tab Application autostart, a line: [ ] PolicyKit Authentication Agent (PolicyKit Authentication Agent)
Yes, it is this one, except I do not see it in my case. As I mentioned, gnome-polkit package does not come with desktop file at all; I do not know where your menu entry comes from. May be it is left from earlier openSUSE releases.
Wait, you mention a desktop file and a menu. It is not that. The menu is in the XFCE Setup application: Settings/Session and Startup, tab Application autostart entry: [ ] PolicyKit Authentication Agent (PolicyKit Authentication Agent) And this entry seems to start the "polkit-kde-authentication-agent". And things then work, which is weird. I can send you a photo if it is not clear.
...
It is polkit-kde-authentication-agent !!
Well, it explains it; but now I'm extremely confused where polkit-gnome comes from in the first place. I do not see anything that requires, recommends or suggests it. It apparently was part of initial installation of 42.1 if I correctly interpret zypper history file. Yet another case of magic performed by installer that cannot be replaced by using patterns after initial installation it seems.
So yes, bug report is definitely in order.
Ok, I'll write one. -- Cheers / Saludos, Carlos E. R. (from 42.2 x86_64 "Malachite" (Minas Tirith))
On 2017-03-25 22:38, Carlos E. R. wrote:
On 2017-03-25 21:56, Andrei Borzenkov wrote:
So yes, bug report is definitely in order.
Ok, I'll write one.
Bug 1031011 - I'm denied access to network edit in XFCE -- Cheers / Saludos, Carlos E. R. (from 42.2 x86_64 "Malachite" (Minas Tirith))
participants (2)
-
Andrei Borzenkov -
Carlos E. R.