Dev1 Galaxy Forum / policykit-1, polkit, polkitd authentication problems

Re: policykit-1, polkit, polkitd authentication problems

dummy@example.com (arjan) — Sat, 10 Mar 2018 01:16:07 +0000

For me everything's working after following these instructions https://lists.dyne.org/lurker/message/2 … f8.en.html.

I was missing the policykit backend libs, and chose to install the consolekit packages.

Re: policykit-1, polkit, polkitd authentication problems

dummy@example.com (greenjeans) — Fri, 09 Mar 2018 22:29:38 +0000

Re-posting what I just posted from another pertinent thread:

I've never had to do anything extensive the times i've had a permission issue with polkit, edit the files in /usr/share/polkit-1/actions/ directly, you can spot the relative entries, it may not be the correct way, but it's quick and it works perfectly. The bolded part on a couple of entries in the udisks2 policy is all it takes.

"-//freedesktop//DTD PolicyKit Policy Configuration 1.0//EN"
"http://www.freedesktop.org/standards/Po … config.dtd">

The udisks Project
http://udisks.freedesktop.org/
drive-removable-media

Mount a filesystem
Authentication is required to mount the filesystem

auth_admin
auth_admin
yes

Re: policykit-1, polkit, polkitd authentication problems

dummy@example.com (GNUser) — Wed, 07 Mar 2018 20:12:34 +0000

rfgmm, when I installed ascii then mate desktop, I was having similar problems. Polkit was installed but the system would not allow me (as regular user) to mount or unmount usb drives, nor shutdown/reboot using the power button on my taskbar.

For me, the solution was to install these two packages: libpolkit-backend-1-0-elogind libpolkit-gobject-1-0-elogind and reboot.

Re: policykit-1, polkit, polkitd authentication problems

dummy@example.com (Geoff 42) — Wed, 07 Mar 2018 15:03:18 +0000

I worked around some problems with the little program that Didier Kryn posted on the DNG mailing list. It looks like pkexec, but just runs sudo or udevil. It can be installed into /usr/local/bin. Follow the links for details.

https://dev1galaxy.org/viewtopic.php?pid=7703#p7703

Geoff

Re: policykit-1, polkit, polkitd authentication problems

dummy@example.com (arjan) — Wed, 07 Mar 2018 10:43:29 +0000

After a recent update I got the same problem again.

I found this relevant link in the beta release discussion: https://lists.dyne.org/lurker/message/2 … f8.en.html

Re: policykit-1, polkit, polkitd authentication problems

dummy@example.com (rfgmm) — Sun, 04 Mar 2018 08:08:10 +0000

after updating today my system started to missbehave like this,

already installed policykit-1-gnome and things still not working.

Re: policykit-1, polkit, polkitd authentication problems

dummy@example.com (arjan) — Mon, 05 Feb 2018 19:41:50 +0000

Thanks nathg for mentioning policykit-1-gnome.

I had the problem that I wasn't prompted for root privileges anymore from GUI applications, after upgrading from Devuan Jessie to Ascii. `dpkg -l | grep policykit` said I had policykit-1-gnome installed, but when I tried `apt-get install --reinstall policykit-1-gnome` it actualy fetched and installed the package, so it seems it wasn't installed after all. After a reboot, I am now again prompted for root privileges from GUI applications.

Re: policykit-1, polkit, polkitd authentication problems

dummy@example.com (fsmithred) — Mon, 28 Aug 2017 00:01:09 +0000

I just did an upgrade to ascii, and I was having the opposite problem. Synaptic and gparted would start without asking for a password. Only worked with the primary user. I noticed that policykit-1-gnome had been removed, so I reinstalled it, and now synaptic and gparted won't start for the user. User can still use pkexec to create another user but has to use the full path for the adduser command.

Re: policykit-1, polkit, polkitd authentication problems

dummy@example.com (nathg) — Sun, 23 Jul 2017 15:11:55 +0000

Hi all,

At initial stage of my upgraded ascii system I lost ability for mounting other volumes on HDD from thunar, launching synaptic from application menu and may be some CD issue. I have been using gksu and modified fstab ( like old days) for ascii without any hassle.

Recently I upgraded my devuan jessie to ascii and found those problems just after upgrade. Then I found two debian bugs #842184 & #842378. Installed package 'policykit-1-gnome' which was deleted from jessie during upgrade, Now my ascii is soid. Hope may help you.

Regards,

Re: policykit-1, polkit, polkitd authentication problems

dummy@example.com (GNUser) — Wed, 07 Jun 2017 03:24:22 +0000

Bummer. Sorry to hear. I wish I knew more about polkit so that I could be of more help.

I hope your clean install of 2.0 goes smoother.

Re: policykit-1, polkit, polkitd authentication problems

dummy@example.com (linijkarz) — Tue, 06 Jun 2017 20:41:21 +0000

Thanks for the advice. I followed it despite the fact that using a display manager is less-than-optimal solution.
Unfortunately - didn't work, the result is the same.

At this point I'm 100% sure it's something wrong with my installation.
I think I'll wait it out for the release of Devuan 2.0 and just do a clean installation.
The most important problem (mounting) was already resolved 2 days ago.

But If anyone has any ideas, I will be more than happy to listen.

Re: policykit-1, polkit, polkitd authentication problems

dummy@example.com (GNUser) — Tue, 06 Jun 2017 16:44:09 +0000

I had many problems with polkit (including the USB mount-unmount and "unable to determine the session" issues) when I tried running Devuan Jessie without a display manager. After many hours of troubleshooting and trial-and-error--over several days--I gave up and gave lightdm a shot.

Well, all the problems vanished once lightdm was installed. I feel mildly bad for not actually learning enough about polkit to manually fix the problems, but on the upside I got fully operational and put a stop to my headache and hair loss.

What DE and what (if any) display manager are you using? If you are not currently using a display manager, may I suggest you give lightdm a shot? If it solves your polkit-related problems, you can easily configure lightdm for autologin and it will stay completely out of your way.

Re: policykit-1, polkit, polkitd authentication problems

dummy@example.com (linijkarz) — Tue, 06 Jun 2017 15:51:01 +0000

Thanks for your input @fsmithred
As You and I can both see, our outputs from auth.log are quite different.

I checked the list you've provided and made a list of packages which come with standard devuan-live system but aren't present on my installation. I'm attaching it because quite frankly I see nothing that could be the culprit but I would be extremely thankful for a second opinion.

alsa-base
b43-fwcutter
colord
cryptsetup
cryptsetup-bin
discover
evince-common
exfalso
exo-utils
firmware-b43-installer
firmware-b43legacy-installer
firmware-bnx2
firmware-bnx2x
firmware-brcm80211
firmware-intelwimax
firmware-libertas
firmware-myricom
firmware-netxen
firmware-qlogic
firmware-ralink
firmware-ti-connectivity
firmware-zd1211
gir1.2-gst-plugins-base-1.0
gir1.2-gstreamer-1.0
gir1.2-keybinder-3.0
gir1.2-wnck-3.0:amd64
gnome-orca
gstreamer0.10-alsa:amd64
gstreamer0.10-plugins-base:amd64
hplip
hyphen-en-us
isolinux
libbasicusageenvironment0
libbrlapi0.6:amd64
libburn4
libdiscid0:amd64
libdiscover2
libdotconf0:amd64
libdvbpsi9:amd64
libevdocument3-4
libevview3-3
libexo-1-0:amd64
libexo-common
libexo-helpers
libflite1:amd64
libfreerdp-cache1.1:amd64
libfreerdp-client1.1:amd64
libfreerdp-codec1.1:amd64
libfreerdp-common1.1.0:amd64
libfreerdp-core1.1:amd64
libfreerdp-crypto1.1:amd64
libfreerdp-gdi1.1:amd64
libfreerdp-locale1.1:amd64
libfreerdp-primitives1.1:amd64
libfreerdp-rail1.1:amd64
libfreerdp-utils1.1:amd64
libgarcon-1-0
libgles1-mesa:amd64
libgpod-common
libgpod4:amd64
libgroupsock1
libgstreamer-plugins-base0.10-0:amd64
libgstreamer0.10-0:amd64
libgusb2:amd64
libical1a
libisoburn1
libisofs6
libjack-jackd2-0:amd64
libjs-underscore
libjte1
libkeybinder-3.0-0:amd64
libkeybinder0
liblouis2:amd64
libpostproc52
libproxy-tools
libsane-hpaio
libsdl-image1.2:amd64
libsgutils2-2
libshine3:amd64
libsonic0:amd64
libthunarx-2-0
libtidy-0.99-0
libusageenvironment1
libvlc5
libvlccore8
libvncclient0:amd64
libvte-common
libvte9
libwinpr-crt0.1:amd64
libwinpr-crypto0.1:amd64
libwinpr-environment0.1:amd64
libwinpr-handle0.1:amd64
libwinpr-heap0.1:amd64
libwinpr-input0.1:amd64
libwinpr-pool0.1:amd64
libwinpr-registry0.1:amd64
libwinpr-rpc0.1:amd64
libwinpr-synch0.1:amd64
libwinpr-thread0.1:amd64
libwinpr-utils0.1:amd64
libwnck-3-0:amd64
libwnck-3-common
libxcb-composite0:amd64
libxcb-xv0:amd64
libxfce4ui-1-0
libxfce4ui-utils
libxfce4util-bin
libxfce4util-common
libxfce4util6
libxfcegui4-4
libxfconf-0-2
libxklavier16
libzvbi-common
libzvbi0:amd64
mousepad
mtools
orage
packagekit
packagekit-tools
popularity-contest
printer-driver-postscript-hp
qtchooser
quodlibet
refractainstaller-base
refractainstaller-gui
refractasnapshot-base
refractasnapshot-gui
ristretto
slim
squashfs-tools
syslinux
syslinux-common
task-desktop
task-xfce-desktop
thunar
thunar-archive-plugin
thunar-volman
va-driver-all:amd64
vdpau-va-driver:amd64
vim
vlc
vlc-nox
vlc-plugin-notify
wicd
wicd-daemon
x11-apps
x11-session-utils
xarchiver
xbrlapi
xfburn
xfce-keyboard-shortcuts
xfce4
xfce4-appfinder
xfce4-artwork
xfce4-clipman
xfce4-clipman-plugin
xfce4-cpufreq-plugin
xfce4-cpugraph-plugin
xfce4-dict
xfce4-diskperf-plugin
xfce4-fsguard-plugin
xfce4-genmon-plugin
xfce4-goodies
xfce4-mixer
xfce4-netload-plugin
xfce4-notes
xfce4-notes-plugin
xfce4-notifyd
xfce4-panel
xfce4-places-plugin
xfce4-power-manager
xfce4-power-manager-plugins
xfce4-quicklauncher-plugin
xfce4-sensors-plugin
xfce4-session
xfce4-settings
xfce4-smartbookmark-plugin
xfce4-systemload-plugin
xfce4-taskmanager
xfce4-terminal
xfce4-verve-plugin
xfce4-wavelan-plugin
xfce4-xkb-plugin
xfconf
xfdesktop4
xorriso
xsane
xsane-common
yad

I also should've mentioned that I tried numerous polkit authentication agents (I'm hoping that I won't be forced to use graphical ones, I would be glad to stick with the CLI-based one that opens in a terminal frankly) and none of them starts successfully.
They all throw an error similar to:

(polkit-mate-authentication-agent-1:4221): polkit-mate-1-WARNING **: Unable to determine the session we are in: No session for pid 4221

polkitd is of course running.

Re: policykit-1, polkit, polkitd authentication problems

dummy@example.com (fsmithred) — Sun, 04 Jun 2017 22:14:15 +0000

This works in the full desktop install. My user (named 'user') is not in the sudo group and does not have any sudo privs.
You're probably missing a package or two. I see some hints in the auth.log when I start synaptic. Make sure you have consolekit and libpam-ck-connector. It's possible that you also need libsystemd0 for this to work. I don't know.

Jun  4 22:02:31 user polkitd(authority=local): Operator of unix-session:/org/freedesktop/ConsoleKit/Session1 successfully authenticated as unix-user:root to gain ONE-SHOT authorization for action com.ubuntu.pkexec.synaptic for unix-process:3030:52170 [/bin/sh /usr/bin/synaptic-pkexec] (owned by unix-user:user)
Jun  4 22:02:31 user pkexec: pam_unix(polkit-1:session): session opened for user root by (uid=1000)
Jun  4 22:02:31 user pkexec: pam_ck_connector(polkit-1:session): cannot determine display-device
Jun  4 22:02:31 user pkexec[3031]: user: Executing command [USER=root] [TTY=unknown] [CWD=/home/user] [COMMAND=/usr/sbin/synaptic]

If that's not enough, check the package list for the desktop install. Her'e's the list for the desktop-live which is what you get if you take the default desktop installation from the dvd (plus a few packages to run it live and install it.)
https://files.devuan.org/devuan_jessie/ … e.list.txt

Re: policykit-1, polkit, polkitd authentication problems

dummy@example.com (linijkarz) — Sun, 04 Jun 2017 21:14:17 +0000

greenjeans wrote:

Might be some settings there that need to change, I know in Openbox I had to mod the udisks2 policy because it didn't want to let me mount other partitions.

Thank you for mentioning OpenBox, I managed to resolve one half of the problem.
My .xinitrc started openbox-session like this, I basically copypasted what gentoo wiki suggested to do

exec ck-launch-session dbus-launch --sh-syntax --exit-with-session openbox-session

I changed it to

exec dbus-launch --sh-syntax --exit-with-session openbox-session

This operation successfully allowed me to mount, unmount, eject external storage via PCmanFM, I can even format it using gnome-disks no problem.

The policykit-related problem still persists. I am unable to perform authentication as if I wasn't in the sudo group.