Andreas Messer wrote on 19.01.2018 07:16:
> That seems strange. loginctl is a elogind command and when elogind does not
> know about the session loginctl should reject or ask for auth. I'll dig into
> this a little bit more. Probably time to setup a vm.
So, I did a little more testing:
* Fresh ascii VM with lightdm and XFCE4; not tampered with.
* ConsoleKit is actually consolekit2 from experimental.
* VM was rebooted after each PAM configuration change.
* USB mass storage devices do not show up in Thunar at all, let
alone being user mountable - despite udisks2 being installed.
(So, I definitely did something special on the other, older VM!)
Scenario 1:
-----------
│ PAM profiles to enable:
│
│ [*] Unix authentication
│ [*] Authenticate using SSH keys and start ssh-agent
│ [*] elogind Session Management
│ [ ] ConsoleKit Session Management
User loggind in via GUI:
* session is listed by loginctl
* Restart/Shutdown only logs out and leads back to lightdm greeter.
User logged in via VT:
* session is listed by loginctl
* "loginctl reboot": "Failed to reboot system via elogind:
Interactive authentication required."
Scenario 2:
-----------
│ PAM profiles to enable:
│
│ [*] Unix authentication
│ [*] Authenticate using SSH keys and start ssh-agent
│ [ ] elogind Session Management
│ [*] ConsoleKit Session Management
User loggind in via GUI:
* session not listed by loginctl
* Restart/Shutdown work as intended.
User logged in on VT:
* session not listed by loginctl
* "loginctl reboot": complains (dbus service unavailable), but works!
Scenario 3:
-----------
│ PAM profiles to enable:
│
│ [*] Unix authentication
│ [*] Authenticate using SSH keys and start ssh-agent
│ [*] elogind Session Management
│ [*] ConsoleKit Session Management
User loggind in via GUI:
* session is listed by loginctl
* Restart/Shutdown only logs out and leads back to lightdm greeter.
User logged in on VT:
* session is listed by loginctl
* "loginctl reboot": asks to authenticate as root.
HTH, best regards
Urban
--
Sapere aude!
_______________________________________________
Dng mailing list
[email protected]
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
