[Pkg-utopia-maintainers] Bug#536490: Bug#536490: Bug#536490: gnome-system-tools: Asks for root password instead of user password via sudo (root disabled)

[Michael Biebl]

Julien BEHEM wrote:
> Michael Biebl a écrit :
>> Julien BEHEM wrote:
>>   
>>> Michael Biebl a écrit :
>>>     
>>>> severity 536490 wishlist
>>>> retitle 536490 enable sudo like behaviour when system uses disabled root account
>>>> thanks
>>>>
>>>> Josselin Mouette wrote:
>>>>   
>>>>       
>>>>> reassign 536490 policykit
>>>>> thanks
>>>>>
>>>>> Le vendredi 10 juillet 2009 à 12:41 +0200, Julien BEHEM a écrit :
>>>>>     
>>>>>         
>>>>>> When launching any gnome-system-tools utility and clicking on the
>>>>>> unlock button, it asks for root password but root account is disabled
>>>>>> and system is using sudo (working well in console, sudo is well
>>>>>> configured, and sudo-mode is set to true for gksu in gconf editor).
>>>>>> I saw an old bugreport of 2008 (number 412982) describing maybe the
>>>>>> same problem and solved by upgrading to 2.16 or 2.17 version, but i'm
>>>>>> using 2.22...
>>>>>>       
>>>>>>           
>>>>> This is a current limitation of PolicyKit.
>>>>>
>>>>>     
>>>>>         
>>>> That is not really a limitation, but a configuration issue. PK can be setup (as
>>>> e.g. Ubuntu does), to allow for a sudo like behaviour.
>>>> If you replace the exiting configuration in /etc/PolicyKit/PolicyKit.conf with
>>>> <config version="0.1">
>>>>     <match user="root">
>>>>         <return result="yes"/>
>>>>     </match>
>>>>     <define_admin_auth group="admin"/>
>>>> </config>
>>>> you should get the same behaviour on Debian (assuming Debian also uses the
>>>> "admin" group for this).
>>>>   
>>>>       
>>> This does not work.
>>> When I click on the Unlock button in any admin tool, instead of getting the 
>>> prompt for root password, I get an error after few seconds of timeout : 
>>> Authentication impossible (or something translated like that).
>>>
>>>     
>>
>> Are you member of the "admin" group?
>>
>>   
> Hmm there is no admin group defined in /etc/groups, but there is a group named 
> adm (which I am a member of). Should I create an admin group, or modify the 
> PolicyKit.conf with "adm" instead of "admin" ?

Either should work (given the admin group you create has root rights).

Joss, do you know what d-i resp. sudo does, when you install a root-disabled system?

Michael



-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 260 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-utopia-maintainers/attachments/20090710/671f486b/attachment-0001.pgp>