Hi Dave,

I'm not sure your issue is a bug in policykit.
It seems to be more likely a configuration issue.
This is quite tricky to configure SSO on Ubuntu as you need to configure 
cleanly the LDAP client part of your workstation, the policykit system for 
rights elevation and PAM for authentication.

Take a look in /etc/polkit-1/localauthority.conf.d
You should have a file called 60-ldap.conf (the number may be different, this 
is just for ordering scripts execution) containing this text:

[Configuration]
AdminIdentities=unix-group:#####

with ##### the name of your domain/local administrators group. You can
provide more than one group if you need to.

Check out that your LDAP client and nsswitch can resolve this group and
all accounts within (getent group).

Hope this helps ;)
Loïc

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/781737

Title:
  policykit cannot grant special priviledges from LDAP-identified
  administrators

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/policykit-1/+bug/781737/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to