Bug#842184: policykit-1: synaptic-pkexec no more work

2016-11-01 Thread Sven C. Dack 

On Thu, 27 Oct 2016 12:11:20 +0200 KeyofBlueS  wrote:
> I am on Xfce so yes, using policykit-1-gnome here. And again yes, after
> running /usr/lib/x86_64-linux-gnu/polkit-gnome-authentication-agent-1 from
> a terminal, authentication works fine.
>
> Good job!
> Thanks
>
> 2016-10-27 11:00 GMT+02:00 Simon McVittie :
>
> > Control: reassign 842184 policykit-1-gnome 0.105-4
> > Control: severity 842184 serious
> >
> > On Thu, 27 Oct 2016 at 07:27:05 +, Grand T wrote:
> > > The error is in policykit-1-gnome 0.105-4
> > >
> > > /etc/xdg/autostart/polkit-gnome-authentication-agent-1.desktop refer to
> > >
> > > Exec=/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1
> > >
> > > but it don't exist so it is not started !
> > >
> > > The exec is now at/usr/lib/x86_64-linux-gnu/polkit-gnome-authentication-
> > agent-1
> > >
> > > I modified
> > >
> > > /etc/xdg/autostart/polkit-gnome-authentication-agent-1.desktop to set up
> > > Exec=/usr/lib/x86_64-linux-gnu/polkit-gnome-authentication-agent-1
> >
> > Good catch! It looks as though this was caused by modernizing the
> > packaging of policykit-1-gnome from debhelper 8 to 10, which changed its
> > ${libexecdir}, without also updating
> > debian/polkit-gnome-authentication-agent-1.desktop to use the new
> > value of ${libexecdir}.
> >
> > So this is not actually a policykit-1 bug, but rather policykit-1-gnome,
> > which is a separate source package. Contrary to its name, pk-1-gnome
> > is not actually used in "full" GNOME any more (because GNOME Shell has
> > its own built-in polkit agent), but it does get used in XFCE, Unity and
> > GNOME Flashback.
> >
> > Brian (and anyone else who is seeing #841878), are you using
> > policykit-1-gnome as your implementation of a polkit agent? If you
> > run /usr/lib/x86_64-linux-gnu/polkit-gnome-authentication-agent-1
> > "by hand" from a terminal, does authentication work normally for you?
> >
> > (If you have edited /etc/xdg/autostart/polkit-
> > gnome-authentication-agent-1.desktop
> > as a workaround, you will probably need to edit it again, or go back to
> > the version provided by the package maintainer, after this bug is fixed -
> > we will probably choose a different location for the authentication agent,
> > or go back to its old location, because the architecture-dependent path is
> > awkward to use in the packaging.)
> >
> > Thanks,
> > S
> >

Safest and easiest work-around is probably the following:

1. In Xfce4 open the menu "Settings" -> "Session and Startup" and select the tab 
"Application Autostart".

2. There scroll to "PolicyKit Authentication Agent" and disable it.
3. Add a new entry with the "+ Add" button with a name like "Polkit Work-Around" 
and the command "/usr/lib/x86_64-linux-gnu/polkit-gnome-authentication-agent-1"

4. Click "Ok" and "Close".

So basically does one disable the default auto-start of the currently broken 
service and replaces it with a private service to start it manually, which can 
later be removed easily once it's been properly fixed.


Also note that not only synaptic seems to be affected, but gparted as well and 
also the gvfs samba plugin for the file manager for browsing Windows shares on 
the LAN needs this, too, and currently fails as well. There will likely be a few 
more.


Sven

Bug#841878: Bug#842184: policykit-1: synaptic-pkexec no more work

2016-10-27 Thread Brian Vaughan 
I can confirm that:

A) Executing
'/usr/lib/x86_64-linux-gnu/polkit-gnome-authentication-agent-1' on the
command line enabled the expected dialog for launching Synaptic from XFCE;

B) The issue has been resolved with policykit-1-gnome 0.105-5.

Thank you.

On Oct 27, 2016 2:00 AM, "Simon McVittie"  wrote:

> Control: reassign 842184 policykit-1-gnome 0.105-4
> Control: severity 842184 serious
>
> On Thu, 27 Oct 2016 at 07:27:05 +, Grand T wrote:
> > The error is in  policykit-1-gnome 0.105-4
> >
> >  /etc/xdg/autostart/polkit-gnome-authentication-agent-1.desktop refer to
> >
> > Exec=/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1
> >
> > but it don't exist so it is not started !
> >
> > The exec is now at/usr/lib/x86_64-linux-gnu/polkit-gnome-authentication-
> agent-1
> >
> > I modified
> >
> > /etc/xdg/autostart/polkit-gnome-authentication-agent-1.desktop to set up
> > Exec=/usr/lib/x86_64-linux-gnu/polkit-gnome-authentication-agent-1
>
> Good catch! It looks as though this was caused by modernizing the
> packaging of policykit-1-gnome from debhelper 8 to 10, which changed its
> ${libexecdir}, without also updating
> debian/polkit-gnome-authentication-agent-1.desktop to use the new
> value of ${libexecdir}.
>
> So this is not actually a policykit-1 bug, but rather policykit-1-gnome,
> which is a separate source package. Contrary to its name, pk-1-gnome
> is not actually used in "full" GNOME any more (because GNOME Shell has
> its own built-in polkit agent), but it does get used in XFCE, Unity and
> GNOME Flashback.
>
> Brian (and anyone else who is seeing #841878), are you using
> policykit-1-gnome as your implementation of a polkit agent? If you
> run /usr/lib/x86_64-linux-gnu/polkit-gnome-authentication-agent-1
> "by hand" from a terminal, does authentication work normally for you?
>
> (If you have edited /etc/xdg/autostart/polkit-
> gnome-authentication-agent-1.desktop
> as a workaround, you will probably need to edit it again, or go back to
> the version provided by the package maintainer, after this bug is fixed -
> we will probably choose a different location for the authentication agent,
> or go back to its old location, because the architecture-dependent path is
> awkward to use in the packaging.)
>
> Thanks,
> S
>

Bug#842184: policykit-1: synaptic-pkexec no more work

2016-10-27 Thread KeyofBlueS 
I am on Xfce so yes, using policykit-1-gnome here. And again yes, after
running /usr/lib/x86_64-linux-gnu/polkit-gnome-authentication-agent-1 from
a terminal, authentication works fine.

Good job!
Thanks

2016-10-27 11:00 GMT+02:00 Simon McVittie :

> Control: reassign 842184 policykit-1-gnome 0.105-4
> Control: severity 842184 serious
>
> On Thu, 27 Oct 2016 at 07:27:05 +, Grand T wrote:
> > The error is in  policykit-1-gnome 0.105-4
> >
> >  /etc/xdg/autostart/polkit-gnome-authentication-agent-1.desktop refer to
> >
> > Exec=/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1
> >
> > but it don't exist so it is not started !
> >
> > The exec is now at/usr/lib/x86_64-linux-gnu/polkit-gnome-authentication-
> agent-1
> >
> > I modified
> >
> > /etc/xdg/autostart/polkit-gnome-authentication-agent-1.desktop to set up
> > Exec=/usr/lib/x86_64-linux-gnu/polkit-gnome-authentication-agent-1
>
> Good catch! It looks as though this was caused by modernizing the
> packaging of policykit-1-gnome from debhelper 8 to 10, which changed its
> ${libexecdir}, without also updating
> debian/polkit-gnome-authentication-agent-1.desktop to use the new
> value of ${libexecdir}.
>
> So this is not actually a policykit-1 bug, but rather policykit-1-gnome,
> which is a separate source package. Contrary to its name, pk-1-gnome
> is not actually used in "full" GNOME any more (because GNOME Shell has
> its own built-in polkit agent), but it does get used in XFCE, Unity and
> GNOME Flashback.
>
> Brian (and anyone else who is seeing #841878), are you using
> policykit-1-gnome as your implementation of a polkit agent? If you
> run /usr/lib/x86_64-linux-gnu/polkit-gnome-authentication-agent-1
> "by hand" from a terminal, does authentication work normally for you?
>
> (If you have edited /etc/xdg/autostart/polkit-
> gnome-authentication-agent-1.desktop
> as a workaround, you will probably need to edit it again, or go back to
> the version provided by the package maintainer, after this bug is fixed -
> we will probably choose a different location for the authentication agent,
> or go back to its old location, because the architecture-dependent path is
> awkward to use in the packaging.)
>
> Thanks,
> S
>

Bug#841878: Bug#842184: policykit-1: synaptic-pkexec no more work

2016-10-27 Thread Simon McVittie 
Control: reassign 842184 policykit-1-gnome 0.105-4
Control: severity 842184 serious

On Thu, 27 Oct 2016 at 07:27:05 +, Grand T wrote:
> The error is in  policykit-1-gnome 0.105-4
> 
>  /etc/xdg/autostart/polkit-gnome-authentication-agent-1.desktop refer to 
> 
> Exec=/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1
> 
> but it don't exist so it is not started !
> 
> The exec is now 
> at/usr/lib/x86_64-linux-gnu/polkit-gnome-authentication-agent-1
> 
> I modified 
> 
> /etc/xdg/autostart/polkit-gnome-authentication-agent-1.desktop to set up
> Exec=/usr/lib/x86_64-linux-gnu/polkit-gnome-authentication-agent-1

Good catch! It looks as though this was caused by modernizing the
packaging of policykit-1-gnome from debhelper 8 to 10, which changed its
${libexecdir}, without also updating
debian/polkit-gnome-authentication-agent-1.desktop to use the new
value of ${libexecdir}.

So this is not actually a policykit-1 bug, but rather policykit-1-gnome,
which is a separate source package. Contrary to its name, pk-1-gnome
is not actually used in "full" GNOME any more (because GNOME Shell has
its own built-in polkit agent), but it does get used in XFCE, Unity and
GNOME Flashback.

Brian (and anyone else who is seeing #841878), are you using
policykit-1-gnome as your implementation of a polkit agent? If you
run /usr/lib/x86_64-linux-gnu/polkit-gnome-authentication-agent-1
"by hand" from a terminal, does authentication work normally for you?

(If you have edited 
/etc/xdg/autostart/polkit-gnome-authentication-agent-1.desktop
as a workaround, you will probably need to edit it again, or go back to
the version provided by the package maintainer, after this bug is fixed -
we will probably choose a different location for the authentication agent,
or go back to its old location, because the architecture-dependent path is
awkward to use in the packaging.)

Thanks,
S

Bug#842184: policykit-1: synaptic-pkexec no more work

2016-10-27 Thread Grand T 
The error is in  policykit-1-gnome 0.105-4


 /etc/xdg/autostart/polkit-gnome-authentication-agent-1.desktop refer to

Exec=/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1

but it don't exist so it is not started !

The exec is now at/usr/lib/x86_64-linux-gnu/polkit-gnome-authentication-agent-1

I modified

/etc/xdg/autostart/polkit-gnome-authentication-agent-1.desktop to set up
Exec=/usr/lib/x86_64-linux-gnu/polkit-gnome-authentication-agent-1

Bug#842184: policykit-1: synaptic-pkexec no more work

2016-10-26 Thread Grand T 
guy@debian:~$  synaptic-pkexec
 AUTHENTICATING FOR com.ubuntu.pkexec.synaptic ===
Authentification is required to run the Synaptic Package Manager
Authenticating as: ,,, (guy)
Password:
polkit-agent-helper-1: error response to PolicyKit daemon: 
GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: No session for cookie
 AUTHENTICATION FAILED ===
Error executing command as another user: Not authorized

This incident has been reported.
guy@debian:~$

root@debian:/home/guy# tail -f /var/log/auth.log

Oct 26 22:50:27 debian polkitd(authority=local): Registered Authentication 
Agent for unix-process:5407:332521 (system bus name :1.62 [pkexec 
/usr/sbin/synaptic], object path 
/org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.UTF-8)
Oct 26 22:50:36 debian polkitd(authority=local): Operator of 
unix-process:5407:332521 FAILED to authenticate to gain authorization for 
action com.ubuntu.pkexec.synaptic for unix-process:5407:332521 [/bin/sh 
/usr/bin/synaptic-pkexec] (owned by unix-user:guy)
Oct 26 22:50:36 debian pkexec[5408]: guy: Error executing command as another 
user: Not authorized [USER=root] [TTY=/dev/pts/2] [CWD=/home/guy] 
[COMMAND=/usr/sbin/synaptic]
Oct 26 22:50:36 debian polkitd(authority=local): Unregistered Authentication 
Agent for unix-process:5407:332521 (system bus name :1.62, object path 
/org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.UTF-8)


root@debian:/home/guy# locale
LANG=fr_FR.UTF-8
LANGUAGE=
LC_CTYPE="fr_FR.UTF-8"
LC_NUMERIC="fr_FR.UTF-8"
LC_TIME="fr_FR.UTF-8"
LC_COLLATE="fr_FR.UTF-8"
LC_MONETARY="fr_FR.UTF-8"
LC_MESSAGES="fr_FR.UTF-8"
LC_PAPER="fr_FR.UTF-8"
LC_NAME="fr_FR.UTF-8"
LC_ADDRESS="fr_FR.UTF-8"
LC_TELEPHONE="fr_FR.UTF-8"
LC_MEASUREMENT="fr_FR.UTF-8"
LC_IDENTIFICATION="fr_FR.UTF-8"
LC_ALL=
root@debian:/home/guy#

Bug#842184: policykit-1: synaptic-pkexec no more work

2016-10-26 Thread Guy Rouger 
Package: policykit-1
Version: 0.105-16
Severity: normal

Dear Maintainer,

*** Reporter, please consider answering these questions, where appropriate ***

   * What led up to the situation?
launch Synaptic
   * What exactly did you do (or not do) that was effective (or
 ineffective)?
using menu
   * What was the outcome of this action?
in command line
debian:~$ synaptic-pkexec
..
polkit-agent-helper-1: error response to PolicyKit daemon:
GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: No session for cookie
 AUTHENTICATION FAILED ===
Error executing command as another user: Not authorized

This incident has been reported.

   * What outcome did you expect instead?
Display of authentification box
*** End of the template - remove these template lines ***



-- System Information:
Debian Release: stretch/sid
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.7.0-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=fr_FR.utf8, LC_CTYPE=fr_FR.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages policykit-1 depends on:
ii  dbus   1.10.12-1
ii  libc6  2.24-5
ii  libglib2.0-0   2.50.1-1
ii  libpam-systemd 231-9
ii  libpam0g   1.1.8-3.3
ii  libpolkit-agent-1-00.105-16
ii  libpolkit-backend-1-0  0.105-16
ii  libpolkit-gobject-1-0  0.105-16

policykit-1 recommends no packages.

policykit-1 suggests no packages.

-- no debconf information