[opensuse] network manager system default setup
Hello: I noticed that network-manager configured networks are different for different users. I would like to make a default system setup and I want that network-manager offers every user the same choices. I would like to setup some default connections as admin. All users should see the same default connections, able to start and stop those connections but not able to modify the connections (add new connection or remove connection). (That is, I would like to imitate the previous smpppd/kinternet/ifup combo behavior with nm.) How to do this in Leap 42.2? Does it matter which nm-applet is run (kde or gtk)? Links to good network manager manuals or howtos are also welcomed. Thanks, Istvan -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 29/06/17 20:35, Istvan Gabor wrote:
Hello:
I noticed that network-manager configured networks are different for different users. I would like to make a default system setup and I want that network-manager offers every user the same choices.
I would like to setup some default connections as admin. All users should see the same default connections, able to start and stop those connections but not able to modify the connections (add new connection or remove connection). (That is, I would like to imitate the previous smpppd/kinternet/ifup combo behavior with nm.)
How to do this in Leap 42.2? Does it matter which nm-applet is run (kde or gtk)?
Links to good network manager manuals or howtos are also welcomed.
Thanks,
Istvan
In the default Plasma NM tool, when you add or edit a connection, under the General tab, select 'All users may connect to this network'. When you OK the dialog you'll be asked for the root password (or this will have been demanded on editing an existing connection). The Advanced button next to this option allows you to select more precisely which users are allowed to connect. I don't know for sure if users can remove a shared connection. I'd have thought the root password would be required for that too. gumb -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 29/06/17 19:55, gumb wrote:
On 29/06/17 20:35, Istvan Gabor wrote:
Hello:
I noticed that network-manager configured networks are different for different users. I would like to make a default system setup and I want that network-manager offers every user the same choices.
I would like to setup some default connections as admin. All users should see the same default connections, able to start and stop those connections but not able to modify the connections (add new connection or remove connection). (That is, I would like to imitate the previous smpppd/kinternet/ifup combo behavior with nm.)
How to do this in Leap 42.2? Does it matter which nm-applet is run (kde or gtk)?
Links to good network manager manuals or howtos are also welcomed.
Thanks,
Istvan
In the default Plasma NM tool, when you add or edit a connection, under the General tab, select 'All users may connect to this network'. When you OK the dialog you'll be asked for the root password (or this will have been demanded on editing an existing connection). The Advanced button next to this option allows you to select more precisely which users are allowed to connect.
Note that - if you're using KDE - this may not work (at least, not the way you want). I haven't dug into it, but from previous threads here it seems KDE stores the password in the user's wallet so the connections can only be created at login. I fell foul of this because I wanted the connections created at boot. The workaround is to use a different desktop, which will then store the password in Network Manager's config file.
I don't know for sure if users can remove a shared connection. I'd have thought the root password would be required for that too.
Cheers, Wol -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On Thu, 29 Jun 2017 20:55:58 +0200, gumb wrote:
On 29/06/17 20:35, Istvan Gabor wrote:
Hello: I noticed that network-manager configured networks are different for different users. I would like to make a default system setup and I want that network-manager offers every user the same choices. I would like to setup some default connections as admin. All users should see the same default connections, able to start and stop those connections but not able to modify the connections (add new connection or remove connection). (That is, I would like to imitate the previous smpppd/kinternet/ifup combo behavior with nm.) How to do this in Leap 42.2? Does it matter which nm-applet is run (kde or gtk)? Links to good network manager manuals or howtos are also welcomed. Thanks, Istvan
In the default Plasma NM tool, when you add or edit a connection, under the General tab, select 'All users may connect to this network'. When you OK the dialog you'll be asked for the root password (or this will have been demanded on editing an existing connection). The Advanced button next to this option allows you to select more precisely which users are allowed to connect.
I don't know for sure if users can remove a shared connection. I'd have thought the root password would be required for that too.
I played with network manager setup. As root I created one wired and one DSL connection. For both I checked all users can use this connection option. After this I ran nm-applet as a normal user. As normal user I could not delete either the wired or the DLS connection (not enough permission). As normal user I could not modify the wired connection. So far it's OK. But I _could_ modify the DSL connection as normal user. This is not OK. Normal users should not be able to change anything has been set up by root. Istvan -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
29.06.2017 21:35, Istvan Gabor пишет:
Hello:
I noticed that network-manager configured networks are different for different users. I would like to make a default system setup and I want that network-manager offers every user the same choices.
I would like to setup some default connections as admin. All users should see the same default connections, able to start and stop those connections but not able to modify the connections (add new connection or remove connection). (That is, I would like to imitate the previous smpppd/kinternet/ifup combo behavior with nm.)
How to do this in Leap 42.2? Does it matter which nm-applet is run (kde or gtk)?
By design NM allows each user to define own connections. If you want to restrict it, you need to use polkit to deny or restrict following actions org.freedesktop.NetworkManager.settings.modify.global-dns org.freedesktop.NetworkManager.settings.modify.hostname org.freedesktop.NetworkManager.settings.modify.own org.freedesktop.NetworkManager.settings.modify.system -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On Fri, 30 Jun 2017 06:27:33 +0300, Andrei Borzenkov wrote:
29.06.2017 21:35, Istvan Gabor пишет:
Hello:
I noticed that network-manager configured networks are different for different users. I would like to make a default system setup and I want that network-manager offers every user the same choices.
I would like to setup some default connections as admin. All users should see the same default connections, able to start and stop those connections but not able to modify the connections (add new connection or remove connection). (That is, I would like to imitate the previous smpppd/kinternet/ifup combo behavior with nm.)
How to do this in Leap 42.2? Does it matter which nm-applet is run (kde or gtk)?
By design NM allows each user to define own connections.
This is the reason I haven't been using nm before. I used ifup method that I configured in yast, and I used kinternet. kinternet and corresponding smpppd were packages in opensuse that made opensuse superior to other linux OSs for me. Unfortunatley since openSUSE 13.2 smpppd and kinternet have been removed. Even DSL connection cannot be set up in yast anymore, only wired connection. This resulted in the situation where a user cannot start and stop a connection if ifup method is used, that is I have to use nm if I want to be able to connect to and disconnect from the network as normal user.
If you want to restrict it, you need to use polkit to deny or restrict following actions
org.freedesktop.NetworkManager.settings.modify.global-dns org.freedesktop.NetworkManager.settings.modify.hostname org.freedesktop.NetworkManager.settings.modify.own org.freedesktop.NetworkManager.settings.modify.system
I will look into this. Thanks, Istvan -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
participants (4)
-
Andrei Borzenkov -
gumb -
Istvan Gabor -
Wols Lists